NetSight
high7.5

CVE-2022-30746

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.

Impact

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.

Affected products

VendorProductAffected versions
SamsungSmartthings
before 1.7.85.12

Weakness classification

References