598 matches found
PT-2022-25055 · Samsung · Smartthings
Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.25 Description: The issue is related to an improper access control vulnerability in the WifiSetupLaunchHelper component. This vulnerability allows attackers to access sensitive information via implicit...
PT-2022-25058 · Samsung · Smartthings
Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.0 Description: The issue is related to improper access control in the cloudNotificationManager.java file, allowing attackers to access sensitive information. This is achieved via the SHOW PERSISTENT BANNER...
CVE-2022-39870: Improper Access Control
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSHMESSAGERECEIVED broadcast...
CVE-2022-39865
The CVE-2022-39865 issue affects Samsung SmartThings: versions prior to 1.7.89.0 expose information via an improper access control in ContentsSharingActivity.java. The vulnerability stems from insufficient access restrictions around implicit broadcasts, enabling an attacker with local access to r...
CVE-2022-39869: Improper Access Control
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVEPERSISTENTBANNER broadcast...
CVE-2022-39871: Improper Access Control
Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...
CVE-2022-39868: Improper Access Control
Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...
CVE-2022-39864: Improper Access Control
Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent...
CVE-2022-39871
CVE-2022-39871 affects Samsung SmartThings (CloudNotificationManager.java) with an improper access control flaw in versions prior to 1.7.89.0. Exploitation could allow an attacker to access sensitive information via implicit broadcasts. The issue is supported by multiple sources (Red Hat, NVD/CVE...
CVE-2022-39870
CVE-2022-39870 affects Samsung SmartThings where the cloudNotificationManager.java component is vulnerable to improper access control. Prior to version 1.7.89.0, an attacker can access sensitive information via the PUSH_MESSAGE_RECEIVED broadcast. The vulnerability is limited to the specified ver...
CVE-2022-39869
Summary: CVE-2022-39869 affects Samsung SmartThings, via an improper access control in cloudNotificationManager.java. Prior to version 1.7.89.0, an attacker could access sensitive information through the REMOVE_PERSISTENT_BANNER broadcast. Affected software/component: SmartThings cloudNotificatio...
CVE-2022-39868
The CVE-2022-39868 entry affects Samsung SmartThings prior to v1.7.89.0, where GedSamsungAccount.kt contains an improper access-control bug that allows attackers to access sensitive information via implicit broadcast. Multiple connected sources corroborate the affected software/file (GedSamsungAc...
CVE-2022-39867
CVE-2022-39867 concerns Samsung SmartThings; the issue resides in the cloudNotificationManager.java component. Affected software is SmartThings prior to version 1.7.89.0, where improper access control could permit an attacker to access sensitive information via the SHOW_PERSISTENT_BANNER broadcas...
CVE-2022-39866
CVE-2022-39866 affects Samsung SmartThings prior to version 1.7.89.0, with the vulnerability located in RegisteredEventMediator.kt. The root cause is improper access control that can allow an attacker to access sensitive information via implicit broadcast. Documents consistently indicate affected...
CVE-2022-39864
The CVE-2022-39864 issue affects Samsung SmartThings, specifically the WifiSetupLaunchHelper component. It is an improper access control vulnerability in SmartThings versions prior to 1.7.89.25, allowing attackers to access sensitive information through implicit intents. The vulnerability targets...
CVE-2022-39867: Improper Access Control
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOWPERSISTENTBANNER broadcast...
CVE-2022-39866: Improper Access Control
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...
PT-2022-25059 · Samsung · Smartthings
Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.0 Description: The issue is related to improper access control in the GedSamsungAccount.kt file, allowing attackers to access sensitive information via implicit broadcast. Recommendations: For versions pri...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 1.7.89.0, which stems from an improper access control vulnerability in...
