Improper Access Control in Samsung Smart Things Product
CVE-2023-21432

7.8HIGH

Key Information:

Vendor
Samsung
Status
Smart Things
Vendor
CVE Published:
9 February 2023

Summary

Samsung Smart Things prior to version 1.7.93 is susceptible to improper access control vulnerabilities, enabling unauthorized users to invite others without the owner's consent. This flaw poses significant security risks, as it allows potential attackers to manipulate access to the service, undermining user privacy and data integrity. It is recommended that users upgrade to the latest version to mitigate these risks effectively.

Affected Version(s)

Smart Things < 1.7.93

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.