Smartthings Security Vulnerabilities and Issues — Smartthings CVE List

Lucene search

SamsungSmartthings

3 matches found

CVE•added 2022/06/07 7:15 p.m.•585 views

CVE-2022-30746

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.

7.5CVSS7.3AI score0.00276EPSS

CVE•added 2022/06/07 7:15 p.m.•57 views

CVE-2022-30749

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.

7.8CVSS7.5AI score0.00046EPSS

CVE•added 2022/06/07 7:15 p.m.•52 views

CVE-2022-30747

PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.

5.5CVSS5.3AI score0.00046EPSS