Smart Things (Samsung Mobile) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-02-09. Vendor: Samsung Mobile.

CVEs of Smart Things

• CVE-2023-21432 - CVSS 7.8 (high), 2023-02-09: Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without authorization of the owner.
• CVE-2022-30747 - CVSS 5.5 (medium), 2022-06-07: PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.
• CVE-2022-30746 - CVSS 7.5 (high), 2022-06-07: Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.
• CVE-2022-30749 - CVSS 7.8 (high), 2022-06-07: Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.
• CVE-2021-25446 - CVSS 5.3 (medium), 2021-08-05: Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.
• CVE-2021-25447 - CVSS 5.3 (medium), 2021-08-05: Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.