Approved changes feed: RSS · Atom

cpe:2.3:a:samsung_mobile:smartthings:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSamsung Mobile (e4aff327-fe3a-5b2e-8533-0cd1b76763b9)
ProductSmartthings (70353c5b-6ce7-5611-8a6e-8935aa7fcc65)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49416 not_vulnerable 2026-06-08 06:50:14.118126 Details available
MEDIUM (4)
Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information.
Published: 2024-12-03T05:47:59.990Z
Updated: 2024-12-03T11:43:45.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34596 not_vulnerable 2026-06-08 06:37:33.806468 Details available
MEDIUM (5.9)
Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the owner.
Published: 2024-07-02T09:23:36.232Z
Updated: 2024-08-02T02:59:21.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20852 not_vulnerable 2026-06-08 06:27:31.153452 Details available
MEDIUM (5.9)
Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration.
Published: 2024-04-02T02:59:48.487Z
Updated: 2024-08-01T22:06:36.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39871 vulnerable 2026-06-08 05:47:18.889229 Details available
MEDIUM (4)
Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-03T12:07:42.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39870 vulnerable 2026-06-08 05:47:18.888968 Details available
MEDIUM (4)
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-03T12:07:42.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39869 vulnerable 2026-06-08 05:47:18.888697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39868 vulnerable 2026-06-08 05:47:18.888442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39867 vulnerable 2026-06-08 05:47:18.888176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39866 vulnerable 2026-06-08 05:47:18.887885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39865 vulnerable 2026-06-08 05:47:18.887493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39864 vulnerable 2026-06-08 05:47:18.886318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25508 vulnerable 2026-06-08 05:30:41.104827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25404 vulnerable 2026-06-08 05:30:40.935485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25378 vulnerable 2026-06-08 05:30:40.878055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.