CVE-2021-25378 Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of…

Description

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service.

Affected products and versions

Product	Affected versions	Fixed in
SmartThings 1.7	earliest → < 1.7.63.6	1.7.63.6

Other CVEs of SmartThings

The 15 CVEs of SmartThings →

CVE-2026-21084 Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information 6.9 Medium CVE-2024-49416 Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to… 4.0 Medium CVE-2024-34596 Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for… 5.9 Medium CVE-2024-20852 Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows… 5.9 Medium