Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.
CWE-284