CVE-2025-53649

MEDIUM

SwitchBot App for iOS/Android V6.24-V9.12 - Sensitive Information Exposure via Log File Insertion

Title source: llm

Description

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs.

References (2)

Core 2

Core References

Various Sources

https://www.switchbot.jp/pages/switchbot-app-vulnerability-fix202507

Third Party Advisory

https://jvn.jp/en/jp/JVN59585716/

Scores

CVSS v3 5.1

EPSS 0.0014

EPSS Percentile 3.6%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-532

Status published

Products (1)

SwitchBot/SwitchBot App for iOS/Android V6.24 through V9.12

Published Jul 29, 2025

Tracked Since Feb 18, 2026