Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-25508 EUVD-2021-12404GHSA-67fr-f628-58c5

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key witho…

Published Nov 5, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Description

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation.

Affected products

VendorProductAffectedFixed
Samsung Mobile SmartThings - – < 1.7.73.22 1.7.73.22

References