Lucene search
+L

598 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/05 12:00 a.m.•8 views

CVE-2021-25447: Improper Access Control

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview...

5.3CVSS5.8AI score0.00794EPSS
SaveExploits0References2
OSV
OSV
•added 2021/06/11 3:15 p.m.•13 views

CVE-2021-25404

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log...

3.3CVSS5.8AI score0.00245EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/11 3:15 p.m.•29 views

CVE-2021-25404

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log...

3.3CVSS0.00245EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/11 3:15 p.m.•22 views

Information disclosure

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log...

2.1CVSS4AI score0.00245EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/06/11 3:15 p.m.•11 views

CVE-2021-25404

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log...

3.3CVSS4.8AI score0.00245EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/11 2:45 p.m.•32 views

CVE-2021-25404

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log...

4.1AI score0.00245EPSS
SaveExploits0References1
CVE
CVE
•added 2021/06/11 2:45 p.m.•55 views

CVE-2021-25404

The CVE-2021-25404 entry relates to an Information Exposure vulnerability in Samsung SmartThings prior to version 1.7.64.21. The issue allows an attacker to access user information via logs on affected devices. Affected product: SmartThings software (pre-1.7.64.21). Root cause: information exposu...

3.3CVSS4AI score0.00245EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/11 12:00 a.m.•8 views

CVE-2021-25404: Insecure Storage of Sensitive Information

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log...

3.3CVSS5.8AI score0.00245EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/06/11 12:00 a.m.•16 views

SmartThings 安全漏洞

Samsung SmartThings Hub STH-ETH-250 is a smart home management device from Samsung South Korea. A security vulnerability exists in versions prior to SmartThings 1.7.64.21 that allows an attacker to access user information via logs...

3.3CVSS4.9AI score0.00245EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/11 12:00 a.m.•4 views

PT-2021-16595

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.64.21 Description: The issue allows an attacker to access user information via log, potentially exposing sensitive data. Recommendations: For versions prior to 1.7.64.21, update to version 1.7.64.21 or later ...

3.3CVSS0.00245EPSS
SaveExploits0References4
OSV
OSV
•added 2021/04/09 6:15 p.m.•13 views

CVE-2021-25378

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service...

5.3CVSS5.8AI score0.00967EPSS
SaveExploits0References2
NVD
NVD
•added 2021/04/09 6:15 p.m.•27 views

CVE-2021-25378

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service...

5.3CVSS0.00967EPSS
SaveExploits0References2
Prion
Prion
•added 2021/04/09 6:15 p.m.•27 views

Improper access control

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service...

5CVSS5.4AI score0.00967EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/04/09 6:15 p.m.•7 views

CVE-2021-25378

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service...

5.3CVSS5.8AI score0.00967EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/04/09 5:39 p.m.•33 views

CVE-2021-25378

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service...

4.3CVSS5.7AI score0.00967EPSS
SaveExploits0References2
CVE
CVE
•added 2021/04/09 5:39 p.m.•84 views

CVE-2021-25378

CVE-2021-25378 affects Samsung SmartThings Hub (notably STH-ETH-250) with improper access control on certain ports, enabling remote temporary denial of service. The vulnerability is associated with SmartThings versions prior to 1.7.63.6. Root cause: improper access control of ports. Impact per so...

5.3CVSS5.4AI score0.00967EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/09 12:00 a.m.•3 views

CVE-2021-25378: Improper Input Validation

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service...

5.3CVSS5.8AI score0.00967EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/04/09 12:00 a.m.•21 views

SmartThings Hub STH-ETH-250 安全漏洞

SAMSUNG SmartThings Hub STH-ETH-250 is a smart home management device from Samsung South Korea. A security vulnerability exists in SmartThings versions prior to 1.7.63.6, which stems from improper access control to certain ports, resulting in a remote temporary denial of service...

5.3CVSS5.8AI score0.00967EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/04/09 12:00 a.m.•23 views

PT-2021-16569 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.63.6 Description: The issue is related to improper access control of certain ports, which allows for remote temporary denial of service. Recommendations: For versions prior to 1.7.63.6, update to version...

5.3CVSS5.3AI score0.00967EPSS
SaveExploits0References3
CNVD
CNVD
•added 2018/10/09 12:00 a.m.•14 views

Samsung SmartThings Hub STH-ETH-250 video-core HTTP server buffer overflow vulnerability (CNVD-2018-20459)

Samsung SmartThings Hub STH-ETH-250 is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the Samsung WifiScan handler for the video-core HTTP server in the Samsung SmartThings Hub STH-ETH-250 usin...

9.9CVSS9.6AI score0.01827EPSS
SaveExploits2References1
Rows per page
Query Builder