CVE-2022-39866 in SmartThings

Sumário

de MITRE • 07/10/2022

Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsável: Samsung Mobile
• Reservar: 05/09/2022
• Divulgação: 07/10/2022
• Moderação: aceite
• Entrada: VDB-210297
• CPE: pronto
• CWE: CWE-284 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00342
• KEV: não
• Atividades: muito baixo
• Sector: Telecommunication, Homeoffice, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-39866
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-39866
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-39866/