Lucene search
+L

527 matches found

CNNVD
CNNVD
added 2024/07/02 12:00 a.m.10 views

SAMSUNG Mobile devices Authorization Issues Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. An authorization issue vulnerability exists in SAMSUNG Mobile devices prior to version 1.8.17, which stems from an improper authentication issue in...

7.5CVSS7AI score0.00483EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/02 12:00 a.m.6 views

PT-2024-26011 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.8.17 Description: The issue concerns improper authentication, allowing remote attackers to bypass the expiration date for members set by the owner. Recommendations: For versions prior to 1.8.17, update to versi...

7.5CVSS7.4AI score0.00483EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/02 3:15 a.m.24 views

CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration...

5.9CVSS5.6AI score0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/02 3:15 a.m.7 views

CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration...

3.3CVSS5.8AI score0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/02 2:59 a.m.29 views

CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/02 2:59 a.m.55 views

CVE-2024-20852

CVE-2024-20852 affects Samsung SmartThings prior to version 1.8.13.22, due to improper verification of intent by a broadcast receiver. Local attackers could access testing configuration. Remediation: upgrade to version 1.8.13.22 or later. No exploitation details are provided in the supplied docum...

5.9CVSS6.5AI score0.00135EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/02 2:59 a.m.14 views

CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration...

5.9CVSS6.7AI score0.00135EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/02 12:00 a.m.10 views

PT-2024-18762 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.8.13.22 Description: The issue is related to improper verification of intent by a broadcast receiver, allowing local attackers to access testing configuration. Recommendations: For versions prior to 1.8.13.22,...

5.9CVSS7AI score0.00135EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/02 12:00 a.m.14 views

SAMSUNG SmartThings 安全漏洞

SAMSUNG SmartThings is an application from Samsung South Korea that connects smart devices. A security vulnerability exists in SAMSUNG SmartThings versions prior to 1.8.13.22, which stems from improper data validation by the broadcast receiver...

5.9CVSS6.6AI score0.00135EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/02/09 12:00 a.m.7 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Smart Things prior to version 1.7.93, which stems from improper access control...

7.8CVSS7.3AI score0.00155EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/07 3:15 p.m.7 views

CVE-2022-39870

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSHMESSAGERECEIVED broadcast...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/07 3:15 p.m.6 views

CVE-2022-39869

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVEPERSISTENTBANNER broadcast...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/07 3:15 p.m.6 views

CVE-2022-39868

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/07 3:15 p.m.8 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/07 3:15 p.m.10 views

CVE-2022-39867

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOWPERSISTENTBANNER broadcast...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/07 3:15 p.m.22 views

CVE-2022-39870

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSHMESSAGERECEIVED broadcast...

7.5CVSS0.00365EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/07 3:15 p.m.21 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS0.00365EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/07 3:15 p.m.6 views

CVE-2022-39868

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/07 3:15 p.m.5 views

CVE-2022-39867

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOWPERSISTENTBANNER broadcast...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/07 3:15 p.m.24 views

CVE-2022-39869

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVEPERSISTENTBANNER broadcast...

7.5CVSS0.00365EPSS
SaveExploits0References1
Rows per page
Query Builder