← Database

CVE-2022-30746

HIGH CVSS: 7.5 Published: 2022-06-07 Modified: 2026-06-17

Description

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.

Affected Platforms

Samsung Smartthings

Weakness Type

CWE-285, CWE-862

References