| CVE-2026-21084 |
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information
|
6.9
Medium
|
Aug 10, 2026 |
| CVE-2024-49416 |
Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to…
|
4.0
Medium
|
Dec 3, 2024 |
| CVE-2024-34596 |
Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for…
|
5.9
Medium
|
Jul 2, 2024 |
| CVE-2024-20852 |
Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows…
|
5.9
Medium
|
Apr 2, 2024 |
| CVE-2022-39869 |
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows…
|
4.0
Medium
|
Oct 7, 2022 |
| CVE-2022-39868 |
Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers…
|
4.0
Medium
|
Oct 7, 2022 |
| CVE-2022-39867 |
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows…
|
4.0
Medium
|
Oct 7, 2022 |
| CVE-2022-39866 |
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows…
|
4.0
Medium
|
Oct 7, 2022 |
| CVE-2022-39865 |
Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows…
|
4.0
Medium
|
Oct 7, 2022 |
| CVE-2022-39864 |
Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows…
|
3.3
Low
|
Oct 7, 2022 |
| CVE-2022-39871 |
Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows…
|
4.0
Medium
|
Oct 7, 2022 |
| CVE-2022-39870 |
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows…
|
4.0
Medium
|
Oct 7, 2022 |
| CVE-2021-25508 |
Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to…
|
5.3
Medium
|
Nov 5, 2021 |
| CVE-2021-25404 |
Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user…
|
Not rated
|
Jun 11, 2021 |
| CVE-2021-25378 |
Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of…
|
4.3
Medium
|
Apr 9, 2021 |