Lucene search
+L

598 matches found

CVE
CVE
•added 2022/10/07 12:00 a.m.•89 views

CVE-2022-39867

CVE-2022-39867 concerns Samsung SmartThings; the issue resides in the cloudNotificationManager.java component. Affected software is SmartThings prior to version 1.7.89.0, where improper access control could permit an attacker to access sensitive information via the SHOW_PERSISTENT_BANNER broadcas...

7.5CVSS7.3AI score0.00415EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/10/07 12:00 a.m.•38 views

CVE-2022-39867

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOWPERSISTENTBANNER broadcast...

4CVSS7.5AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/07 12:00 a.m.•6 views

CVE-2022-39870: Improper Access Control

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSHMESSAGERECEIVED broadcast...

7.5CVSS7.3AI score0.00415EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•21 views

PT-2022-25058 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.89.0 Description: The issue is related to improper access control in the cloudNotificationManager.java file, allowing attackers to access sensitive information. This is achieved via the SHOW PERSISTENT BANNER...

7.5CVSS7.4AI score0.00415EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/10/07 12:00 a.m.•19 views

Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 1.7.89.0 due to an improper access control vulnerability in...

7.5CVSS7.4AI score0.00415EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•5 views

PT-2022-25062

Name of the Vulnerable Software and Affected Versions SmartThings versions prior to 1.7.89.0 Description The issue is related to an improper access control vulnerability in the cloudNotificationManager.java file. This vulnerability allows attackers to access sensitive information via the PUSH...

7.5CVSS0.00415EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/10/07 12:00 a.m.•54 views

CVE-2022-39866

Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

4CVSS7.5AI score0.00415EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/16 12:00 a.m.•44 views

Samsung SmartThings PendingIntent Hijacking Vulnerability

SmartThings is a powerful Samsung smart home mobile app. A PendingIntent hijacking vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. An unauthorized local attacker can exploit the vulnerability to access files via an implicit Intent...

5.5CVSS5.2AI score0.00195EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/14 12:00 a.m.•36 views

Samsung SmartThings Access Control Error Vulnerability

Samsung SmartThings is a powerful Samsung smart home mobile app from Samsung South Korea.An access control error vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. The vulnerability stems from improper access control and can be exploited by local attackers to bypass login...

7.8CVSS3.5AI score0.00185EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/06/07 7:15 p.m.•14 views

CVE-2022-30746

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API...

7.5CVSS5.8AI score0.0089EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/06/07 7:15 p.m.•22 views

CVE-2022-30747

PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent...

5.5CVSS6.1AI score0.00195EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/06/07 7:15 p.m.•9 views

CVE-2022-30746

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API...

7.5CVSS5.8AI score0.0089EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/06/07 12:00 a.m.•19 views

Samsung Mobile security vulnerabilities

Samsung mobile is a cell phone from Samsung South Korea. A security vulnerability exists in Samsung mobile Smart Things prior to version 1.7.85.12. The vulnerability allows an attacker to remotely access sensitive information using the javascript interface API...

7.5CVSS7.3AI score0.0089EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/06/07 12:00 a.m.•25 views

Samsung Mobile security vulnerabilities

SmartThings is a powerful Samsung smart home mobile app. A PendingIntent hijacking vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. An unauthorized local attacker can exploit the vulnerability to access files via an implicit Intent...

5.5CVSS5.6AI score0.00195EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/06/07 12:00 a.m.•25 views

Samsung Mobile Authorization Issue Vulnerability

Samsung SmartThings is a powerful Samsung smart home mobile app from Samsung South Korea.An access control error vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. The vulnerability stems from improper access control and can be exploited by local attackers to bypass login...

7.8CVSS5.8AI score0.00185EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/11/09 12:00 a.m.•55 views

Samsung SmartThings Privilege Management Vulnerability (CNVD-2025-02721)

Samsung SmartThings is an app from Samsung South Korea that connects smart devices. A privilege management vulnerability exists in Samsung SmartThings versions prior to 1.7.73.22, which stems from improper privilege management of the API key used by SmartThings, and can be exploited by an attacke...

9.8CVSS6.7AI score0.00827EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/05 3:15 a.m.•39 views

CVE-2021-25508

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation...

9.8CVSS0.00827EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/11/05 3:15 a.m.•23 views

CVE-2021-25508

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation...

9.8CVSS7.3AI score0.00827EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/11/05 3:15 a.m.•11 views

CVE-2021-25508

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation...

9.8CVSS8.4AI score0.00827EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/05 3:15 a.m.•28 views

Privilege escalation

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation...

7.5CVSS9.3AI score0.00827EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder