Improper access control

2022-10-0715:15:00

PRIOn knowledge base

www.prio-n.com

access control

vulnerability

smartthings

cloud

unauthorized access

sensitive information

nvd

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOW_PERSISTENT_BANNER broadcast.

CPENameOperatorVersion
smartthingslt1.7.89.0

CPE	Name	Operator	Version
	smartthings	lt	1.7.89.0

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=10