Skip to content
OpenAdvisories
High · 7.5 CVE-2022-30746 EUVD-2022-52575GHSA-7wph-75g6-r67w

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript in…

Published Jun 7, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Smart Things

Description

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.

Affected products

VendorProductAffectedFixed
Samsung Mobile Smart Things unspecified – < 1.7.85.12 1.7.85.12

References