CVE-2021-25446

CVE-2021-25446 affects Samsung SmartThings prior to version 1.7.67.25. The issue is an improper access control vulnerability that allows untrusted applications to cause arbitrary webpage loading in WebView. Evidence from multiple sources confirms the affected software version range and the root c...

CVE-2021-25447

The CVE concerns Samsung SmartThings. Affected product: SmartThings app (versions prior to 1.7.67.25). Root cause: improper access control allowing untrusted applications to perform local file inclusion in the WebView. Impact: local file inclusion in the app context (no vector details provided be...

CVE-2021-25404

The CVE-2021-25404 entry relates to an Information Exposure vulnerability in Samsung SmartThings prior to version 1.7.64.21. The issue allows an attacker to access user information via logs on affected devices. Affected product: SmartThings software (pre-1.7.64.21). Root cause: information exposu...