Improper Access Control in SmartThings by Samsung

CVE-2022-39865

What is CVE-2022-39865?

An improper access control vulnerability exists in SmartThings prior to version 1.7.89.0, where attackers can exploit implicit broadcasts to gain access to sensitive information. This flaw highlights significant security risks associated with insufficient access management within the application, potentially exposing personal user data.

References