CVE-2021-25404

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log...

CVE-2025-2233

Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. T...

CVE-2025-2233

Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. T...

CVE-2025-2233

Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. T...

CVE-2025-2233

Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. T...

CVE-2025-2233 Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability

Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. T...

CVE-2025-2233 Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability

Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. T...

CVE-2025-2233

CVE-2025-2233 affects Samsung SmartThings through the Hub Local API service (listening on TCP 8766). The flaw is improper verification of a cryptographic signature, enabling network-adjacent attackers to bypass authentication. Documented impacts indicate authentication bypass with no user interac...

Samsung SmartThings 数据伪造问题漏洞

SAMSUNG SmartThings is an app for connectable smart devices from Samsung South Korea. A data forgery issue vulnerability exists in Samsung SmartThings that stems from not properly verifying cryptographic signatures, which could lead to authentication bypass...

(0Day) (Pwn2Own) Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Hub Local API service, which listens on TCP port 8766 by default. The...

PT-2025-10977 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings, with no authentication required for exploitation. The fla...

CVE-2025-2233: Improper Verification of Cryptographic Signature

Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. T...

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

CVE-2024-49416

CVE-2024-49416 concerns Samsung SmartThings prior to version 1.8.21, where an implicit intent used for sensitive communication can leak information to a local attacker. The vulnerability is described across multiple sources (NVD, Red Hat, CVE listings) with a consistent impact: exposure of sensit...

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

PT-2024-33526

Name of the Vulnerable Software and Affected Versions SmartThings versions prior to 1.8.21 Description The use of implicit intent for sensitive communication in SmartThings allows local attackers to obtain sensitive information. Recommendations For versions prior to 1.8.21, update to version 1.8....

CVE-2024-49416: Undefined Security Weakness

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

SAMSUNG SmartThings 安全漏洞

SAMSUNG SmartThings is an app for connectable smart devices from Samsung South Korea. A security vulnerability exists in SAMSUNG SmartThings versions prior to 1.8.21, which stems from the use of implicit intent for sensitive communications, allowing a local attacker to obtain sensitive informatio...