CVE-2025-21073

Medium · 4.1

CVSS

4.1

EPSS

0.2%

Published

Nov 5, 2025

CISA due date

—

The record

Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed