Approved changes feed: RSS · Atom

cpe:2.3:a:samsung_mobile:smart_things:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSamsung Mobile (e4aff327-fe3a-5b2e-8533-0cd1b76763b9)
ProductSmart Things (9ef26762-1b1e-5ad9-82fa-6685c5d88401)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-21432 vulnerable 2026-06-08 05:54:18.805112 Details available
MEDIUM (4.2)
Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without authorization of the owner.
Published: 2023-02-09T00:00:00.000Z
Updated: 2025-03-24T18:56:24.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30749 vulnerable 2026-06-08 05:43:39.687749 Details available
LOW (3.3)
Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.
Published: 2022-06-07T18:21:27.000Z
Updated: 2024-08-03T06:56:14.044Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30747 vulnerable 2026-06-08 05:43:39.685229 Details available
MEDIUM (5.5)
PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.
Published: 2022-06-07T18:20:41.000Z
Updated: 2024-08-03T06:56:13.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30746 vulnerable 2026-06-08 05:43:39.683676 Details available
HIGH (7.5)
Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.
Published: 2022-06-07T18:20:19.000Z
Updated: 2024-08-03T06:56:14.008Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25447 vulnerable 2026-06-08 05:30:41.009808 Details available
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.
Published: 2021-08-05T19:43:56.000Z
Updated: 2024-08-03T20:03:05.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25446 vulnerable 2026-06-08 05:30:41.009133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.