Samsung Mobile Smart Things vulnerabilities

6 vulnerabilities

Known vulnerabilities in Samsung Mobile Smart Things, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2021-25447samsung mobilesmart things+1
EPSS score
0.79%
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.5.3CVE-2021-25446samsung mobilesmart things+1
EPSS score
0.81%
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.7.5CVE-2022-30746samsung mobilesmart things+1
EPSS score
0.89%
Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.5.5CVE-2022-30747samsung mobilesmart things+1
EPSS score
0.19%
PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.7.8CVE-2022-30749samsung mobilesmart things+1
EPSS score
0.18%
Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.7.8CVE-2023-21432samsung mobilesmart things+1
EPSS score
0.15%
Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without authorization of the owner.