4.0
Medium
CVE-2022-39866 Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows…
Description
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SmartThings 1.7 | earliest → < 1.7.89.0 | 1.7.89.0 |
Other CVEs of SmartThings
The 15 CVEs of SmartThings →
CVE-2026-21084
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information
6.9
Medium
CVE-2024-49416
Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to…
4.0
Medium
CVE-2024-34596
Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for…
5.9
Medium
CVE-2024-20852
Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows…
5.9
Medium