Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: Samsung Mobile SmartThings 1.7.89.0 Clear all filters
TI-2022-18865 CVE-2022-39871 · GHSA-8qvv-qwjg-p4qv

Improper access control in Samsung SmartThings

Priority LOW 33

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2022-10-07 Fixed in 1.7.89.0 CWE-284
TI-2022-18864 CVE-2022-39870 · GHSA-ghmf-g5gh-vjmc

Improper access control in Samsung SmartThings

Priority LOW 33

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2022-10-07 Fixed in 1.7.89.0 CWE-284
TI-2022-18863 CVE-2022-39869 · GHSA-fcj5-hc2w-p9g4

Improper access control in Samsung SmartThings

Priority LOW 33

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVE_PERSISTENT_BANNER broadcast.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2022-10-07 Fixed in 1.7.89.0 CWE-284
TI-2022-18862 CVE-2022-39868 · GHSA-638f-v29c-5qwq

Improper access control in Samsung SmartThings

Priority LOW 33

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2022-10-07 Fixed in 1.7.89.0 CWE-284
TI-2022-18861 CVE-2022-39867 · GHSA-chq4-r76r-rh84

Improper access control in Samsung SmartThings

Priority LOW 33

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOW_PERSISTENT_BANNER broadcast.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2022-10-07 Fixed in 1.7.89.0 CWE-284
TI-2022-18860 CVE-2022-39866 · GHSA-hp3q-rgpx-37wq

Improper access control in Samsung SmartThings

Priority LOW 33

Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2022-10-07 Fixed in 1.7.89.0 CWE-284
TI-2022-18859 CVE-2022-39865 · GHSA-7hhw-c2c3-vp77

Improper access control in Samsung SmartThings

Priority LOW 33

Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2022-10-07 Fixed in 1.7.89.0 CWE-284