Smartthings Firmware (Samsung) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2021-08-05. Vendor: Samsung.

CVEs of Smartthings Firmware

• CVE-2021-25447 - CVSS 5.3 (medium), 2021-08-05: Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.
• CVE-2021-25446 - CVSS 5.3 (medium), 2021-08-05: Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.
• CVE-2021-25404 - CVSS 3.3 (low), 2021-06-11: Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.