Smart Switch
18 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Smart Switch, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
Smart Switch CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 1 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 1 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 4 |
| 2025-11 | 1 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 7 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 4 |
| 2026-09 | 0 |
Severity
How the 18 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High6
- Medium10
Latest CVEs
The 15 most recently published vulnerabilities affecting Smart Switch.
- CVE-2026-21083Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.6.5
- CVE-2026-21080Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.6.5
- CVE-2026-21079Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.6.5
- CVE-2026-21078Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.6.5
- CVE-2026-21005Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.6.5
- CVE-2026-21004Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.6.5
- CVE-2026-20999Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.7.5
- CVE-2026-20998Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.9.8
- CVE-2026-20997Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.9.8
- CVE-2026-20996Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.5.3
- CVE-2026-20995Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.5.3
- CVE-2025-21078Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.8.8
- CVE-2025-21064Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.8.8
- CVE-2025-21062Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering t...7.8
- CVE-2025-21061Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.7.1
Product grouping is registry-driven, with AI assist and human review. How it works