Samsung Mobile Smart Things

• CVE-2023-21432 Medium 4.2 Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without authorization of the owner. 0.2%
• CVE-2022-30749 Low 3.3 Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity. 0.2%
• CVE-2022-30747 Medium 5.5 PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent. 0.2%
• CVE-2022-30746 High 7.5 Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API. 0.9%
• CVE-2021-25447 Unrated Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview. 0.8%
• CVE-2021-25446 Unrated Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview. 0.8%