Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2021-25446

Disclosure Date: August 05, 2021 (last updated February 23, 2025)
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.
Attacker Value
Unknown

CVE-2021-25447

Disclosure Date: August 05, 2021 (last updated February 23, 2025)
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.
Attacker Value
Unknown

CVE-2021-25404

Disclosure Date: June 11, 2021 (last updated February 22, 2025)
Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.