The flaw in Samsung Smart Switch arises from an absent authentication check, allowing an attacker to set a specific configuration value without verification. This leads to unauthorized changes in application settings, compromising the device’s integrity and opening doors for further escalation. The weakness falls under an inappropriate restriction of authority.

All Samsung Mobile Smart Switch installations older than version 3.7.69.15 are vulnerable. Devices running those versions can be altered remotely through the application interface.

The CVSS score of 5.3 reflects moderate severity, while the low exploitation likelihood advises caution. The vulnerability can be exploited remotely via the Smart Switch interface, requiring network access to the device. Because it is not part of the known exploited vulnerabilities catalog, active monitoring is recommended but the immediate risk remains manageable.