5.3
Moyenne
CVE-2021-25508 Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to…
Description
Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SmartThings 1.7 | premières → < 1.7.73.22 | 1.7.73.22 |
Autres CVE de SmartThings
Les 15 CVE de SmartThings →
CVE-2026-21084
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information
6.9
Moyenne
CVE-2024-49416
Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to…
4.0
Moyenne
CVE-2024-34596
Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for…
5.9
Moyenne
CVE-2024-20852
Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows…
5.9
Moyenne