cbcvebase.
CVE-2022-39865
published 2022-10-07

CVE-2022-39865: Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information…

high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.

Affected

2 ranges
VendorProductVersion rangeFixed in
samsungsmartthings< 1.7.89.01.7.89.0
samsung_mobilesmartthings>= unspecified < 1.7.89.01.7.89.0