Improper Access Control in Samsung Smart Things Product
CVE-2023-21432

4.2MEDIUM

Key Information:

Vendor
Samsung
Status
Smart Things
Vendor
CVE Published:
9 February 2023

Summary

Samsung Smart Things prior to version 1.7.93 is susceptible to improper access control vulnerabilities, enabling unauthorized users to invite others without the owner's consent. This flaw poses significant security risks, as it allows potential attackers to manipulate access to the service, undermining user privacy and data integrity. It is recommended that users upgrade to the latest version to mitigate these risks effectively.

Affected Version(s)

Smart Things < 1.7.93

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.