CVE-2025-53649 - CVE House
Back to Database
Status published Medium CVE-2025-53649

"SwitchBot" App for iOS/Android contains an insertion of sensitive information...

Vulnerability Description

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53649

Credits & Attribution

No credits recorded in the NVD database.

References

More from SwitchBot

View All →
CVE-2025-64983
Smart Video Doorbell firmware versions prior to 2.01.078 contain an...
High 8.6

Affected Vendor

Affected Software

SwitchBot App for iOS/Android
Vulnerable Versions:
V6.24 through V9.12

Timeline

Official Publish: July 29th, 2025
Last Modified: July 29th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-532

MITRE ATT&CK TTPs

T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1555 Credentials from Password Stores
Credential Access
T1078 Valid Accounts
Persistence
T1562 Impair Defenses
Defense Evasion