cbcvebase.
CVE-2022-39868
published 2022-10-07

CVE-2022-39868: Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via…

high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.

Affected

2 ranges
VendorProductVersion rangeFixed in
samsungsmartthings< 1.7.89.01.7.89.0
samsung_mobilesmartthings>= unspecified < 1.7.89.01.7.89.0