Lucene search

K
nvd[email protected]NVD:CVE-2022-39865
HistoryOct 07, 2022 - 3:15 p.m.

CVE-2022-39865

2022-10-0715:15:21
CWE-284
web.nvd.nist.gov
access control
contentssharingactivity
smartthings
vulnerability
implicit broadcast

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

41.9%

Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.

Affected configurations

NVD
Node
samsungsmartthingsRange<1.7.89.0android

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

41.9%

Related for NVD:CVE-2022-39865