Skip to content
OpenAdvisories
High · 7.3 CVE-2021-26638 EUVD-2021-13432GHSA-82jv-68vh-8wp7

Xi Smarthome wallpad authentication bypass vulnerability

Published Jun 22, 2022 · Updated Aug 3, 2024 · Assigned by krcert

Description

Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control.

Affected products

VendorProductAffectedFixed
Xi S&D S&D smarthome (smartcare) unspecified – ≤ 3.2.48 —

References