Smart Switch 在 3.7.69.15 版本之前存在身份验证不当问题，允许相邻攻击者触发拒绝服务。

The primary impact of CVE-2026-21004 is a denial of service. An attacker, positioned physically near a device running a vulnerable version of Smart Switch, can exploit this flaw to render the application unresponsive. This could interrupt ongoing data transfers, prevent users from backing up their devices, or hinder other critical functions managed through Smart Switch. The attack requires physical proximity, limiting the immediate blast radius, but could be disruptive in environments where Smart Switch is frequently used, such as shared workspaces or public charging stations. While the vulnerability doesn't directly lead to data exfiltration, the disruption caused by the DoS could be leveraged as a distraction for other malicious activities.

Users who rely on Samsung Smart Switch for device management and data transfer, particularly those in shared environments like offices, libraries, or public transportation hubs, are at increased risk. Individuals using older, unpatched versions of Smart Switch are especially vulnerable.

• android / supply-chain:

Get-Process -Name "SmartSwitch"

• android / supply-chain:

Get-AppxPackage -Name "com.samsung.smartswitch"

• android / supply-chain: Check for unusual network activity originating from the Smart Switch application using Android's network monitoring tools. • android / supply-chain: Review device logs for errors or crashes related to Smart Switch, which could indicate exploitation attempts.

1. 2026-03-16Disclosure

   disclosure

1. 已保留2025-12-11
2. 发布日期2026-03-16
3. EPSS 更新日期2026-03-23

The primary mitigation for CVE-2026-21004 is to upgrade Samsung Smart Switch to version 3.7.69.15 or later. If an immediate upgrade is not feasible due to compatibility issues or system downtime requirements, consider temporarily disabling Smart Switch when not in use to reduce the attack surface. While a direct WAF rule is not applicable, restricting physical access to devices running vulnerable versions of Smart Switch can significantly reduce the risk. There are no specific Sigma or YARA rules available for this vulnerability at this time.