Not rated
CVE-2021-25446 Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause…
Description
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Smart Things 1.7 | earliest → < 1.7.67.25 | 1.7.67.25 |
Other CVEs of Smart Things
The 6 CVEs of Smart Things →
CVE-2023-21432
Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without…
4.2
Medium
CVE-2022-30749
Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart…
3.3
Low
CVE-2022-30747
PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files…
5.5
Medium
CVE-2022-30746
Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information…
7.5
High