Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 33

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00188 Published 2022-06-07 Fixed in 1.7.85.25 CWE-287
Priority LOW 24

PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00198 Published 2022-06-07 Fixed in 1.7.85.25 CWE-276