← Database

CVE-2022-39867

MEDIUM CVSS: 4.0 Published: 2022-10-07 Modified: 2026-06-17

Description

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOW_PERSISTENT_BANNER broadcast.

Affected Platforms

Samsung Smartthings

Weakness Type

CWE-284, NVD-CWE-Other

References