Samsung Mobile SmartThings

• CVE-2026-21084 Medium 6.9 Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information. 0.1%
• CVE-2024-49416 Medium 4.0 Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information. 0.1%
• CVE-2024-34596 Medium 5.9 Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the owner. 0.5%
• CVE-2024-20852 Medium 5.9 Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration. 0.1%
• CVE-2022-39871 Medium 4.0 Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts. 0.4%
• CVE-2022-39867 Medium 4.0 Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOW_PERSISTENT_BANNER broadcast. 0.4%
• CVE-2022-39868 Medium 4.0 Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast. 0.4%
• CVE-2022-39864 Low 3.3 Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent. 0.4%
• CVE-2022-39865 Medium 4.0 Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast. 0.4%
• CVE-2022-39866 Medium 4.0 Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast. 0.4%
• CVE-2022-39870 Medium 4.0 Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast. 0.4%
• CVE-2022-39869 Medium 4.0 Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVE_PERSISTENT_BANNER broadcast. 0.4%
• CVE-2021-25508 Medium 5.3 Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation. 0.8%
• CVE-2021-25404 Unrated Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log. 0.2%
• CVE-2021-25378 Medium 4.3 Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service. 1.0%