CVE-2021-25446

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.

Score

CVSS 3.1 5.3 Medium

Status

Modified - mobile.security@samsung.com

Published

2021-08-05

Last modified

2024-08-03

Weaknesses

CWE-284

Affected products

• Smartthings Firmware (Samsung)
• Smart Things (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=8