PT-2022-25055 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.25 Description: The issue is related to an improper access control vulnerability in the WifiSetupLaunchHelper component. This vulnerability allows attackers to access sensitive information via implicit...

CVE-2022-39866

Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

PT-2022-25058 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.0 Description: The issue is related to improper access control in the cloudNotificationManager.java file, allowing attackers to access sensitive information. This is achieved via the SHOW PERSISTENT BANNER...

PT-2022-25059 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.0 Description: The issue is related to improper access control in the GedSamsungAccount.kt file, allowing attackers to access sensitive information via implicit broadcast. Recommendations: For versions pri...

CVE-2022-39867

CVE-2022-39867 concerns Samsung SmartThings; the issue resides in the cloudNotificationManager.java component. Affected software is SmartThings prior to version 1.7.89.0, where improper access control could permit an attacker to access sensitive information via the SHOW_PERSISTENT_BANNER broadcas...

CVE-2022-39869

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVEPERSISTENTBANNER broadcast...

CVE-2022-39868

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

PT-2022-25056 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.0 Description: The issue is related to improper access control in the ContentsSharingActivity.java file, allowing attackers to access sensitive information via implicit broadcast. Recommendations: For...

CVE-2022-39871

CVE-2022-39871 affects Samsung SmartThings (CloudNotificationManager.java) with an improper access control flaw in versions prior to 1.7.89.0. Exploitation could allow an attacker to access sensitive information via implicit broadcasts. The issue is supported by multiple sources (Red Hat, NVD/CVE...

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 1.7.89.0, which stems from an improper access control vulnerability in...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 1.7.89.0, which stems from an improper access control vulnerability in...

CVE-2022-39865

The CVE-2022-39865 issue affects Samsung SmartThings: versions prior to 1.7.89.0 expose information via an improper access control in ContentsSharingActivity.java. The vulnerability stems from insufficient access restrictions around implicit broadcasts, enabling an attacker with local access to r...

CVE-2022-39870

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSHMESSAGERECEIVED broadcast...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 1.7.89.0, which stems from an improper access control vulnerability in...

CVE-2022-39867

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOWPERSISTENTBANNER broadcast...

PT-2022-25060 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.0 Description: The issue is related to improper access control in the cloudNotificationManager.java file, allowing attackers to access sensitive information. This is achieved via the REMOVE PERSISTENT BANN...

CVE-2022-39870

CVE-2022-39870 affects Samsung SmartThings where the cloudNotificationManager.java component is vulnerable to improper access control. Prior to version 1.7.89.0, an attacker can access sensitive information via the PUSH_MESSAGE_RECEIVED broadcast. The vulnerability is limited to the specified ver...

CVE-2022-39869

Summary: CVE-2022-39869 affects Samsung SmartThings, via an improper access control in cloudNotificationManager.java. Prior to version 1.7.89.0, an attacker could access sensitive information through the REMOVE_PERSISTENT_BANNER broadcast. Affected software/component: SmartThings cloudNotificatio...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 1.7.89.25, which stems from an improper access control vulnerability in...