Local File Access Vulnerability in Smart Things by Samsung
CVE-2022-30747

5.5MEDIUM

Key Information:

Vendor
Samsung
Status
Smart Things
Vendor
CVE Published:
7 June 2022

Summary

A local file access vulnerability exists in Smart Things prior to version 1.7.85.25 that allows local attackers to leverage PendingIntent hijacking. This flaw enables unauthorized access to files without the necessary permissions, potentially exposing sensitive user information or leading to further exploitation.

Affected Version(s)

Smart Things < 1.7.85.25

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.