7.5
Élevée
CVE-2022-30746 Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information…
Description
Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Smart Things 1.7 | premières → < 1.7.85.12 | 1.7.85.12 |
Autres CVE de Smart Things
Les 6 CVE de Smart Things →
CVE-2023-21432
Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without…
4.2
Moyenne
CVE-2022-30749
Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart…
3.3
Faible
CVE-2022-30747
PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files…
5.5
Moyenne
CVE-2021-25447
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause…
Non notée