Samsung Mobile Smartthings vulnerabilities
11 vulnerabilities
Known vulnerabilities in Samsung Mobile Smartthings, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25378samsung mobilesmartthings+1
EPSS score0.97%
Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service.CVE-2021-25404samsung mobilesmartthings+1EPSS score0.24%
Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.CVE-2021-25508samsung mobilesmartthings+1EPSS score0.83%
Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation.CVE-2022-39868samsung mobilesmartthings+1EPSS score0.41%
Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.CVE-2022-39870samsung mobilesmartthings+1EPSS score0.41%
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast.CVE-2022-39867samsung mobilesmartthings+1EPSS score0.41%
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOW_PERSISTENT_BANNER broadcast.CVE-2022-39864samsung mobilesmartthings+1EPSS score0.39%
Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent.CVE-2022-39866samsung mobilesmartthings+1EPSS score0.41%
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.CVE-2022-39869samsung mobilesmartthings+1EPSS score0.41%
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVE_PERSISTENT_BANNER broadcast.CVE-2022-39865samsung mobilesmartthings+1EPSS score0.41%
Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.CVE-2022-39871samsung mobilesmartthings+1EPSS score0.41%
Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts.