[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fydfASpGx23cyKSQ93jugMCDHkOJ1qp66PXKByDlcM54":3,"g5a-ex:samsung\u002Fsmartthings@*":119,"g5a-family:samsung\u002Fsmartthings":121},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":41,"kevVulnerabilities":96,"seoMetadata":97,"meta":116},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"samsung","smartthings",8,20,0,"2025-03-11",[14,17,19,21,23,25,27,29],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.55.5",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.73.22",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.85.12",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.85.25",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.89.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.13.22",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.17",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.21","Smartthings by Samsung is a technology product with 8 tracked versions and 20 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39,40],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},[42,50,57,64,69,73,79,85,90,93],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":16,"epssScore":49},"CVE-2021-25378","Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service.","2021-04-09",5.3,"v3.1","Medium",0.00967,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":47,"severity":55,"isKev":16,"epssScore":56},"CVE-2022-30746","Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.","2022-06-07",7.5,"High",0.00904,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":47,"severity":62,"isKev":16,"epssScore":63},"CVE-2021-25508","Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation.","2021-11-05",9.8,"Critical",0.00827,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":16,"epssScore":68},"CVE-2021-25446","Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.","2021-08-05",0.00814,{"cveId":70,"description":71,"publishedDate":67,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":16,"epssScore":72},"CVE-2021-25447","Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.",0.00794,{"cveId":74,"description":75,"publishedDate":12,"cvssScore":76,"cvssVersion":77,"severity":55,"isKev":16,"epssScore":78},"CVE-2025-2233","Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the Hub Local API service, which listens on TCP port 8766 by default. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25615.",8.8,"v3.0",0.0077,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":47,"severity":48,"isKev":16,"epssScore":84},"CVE-2024-34596","Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the owner.","2024-07-02",5.9,0.00483,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":54,"cvssVersion":47,"severity":55,"isKev":16,"epssScore":89},"CVE-2022-39870","Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast.","2022-10-07",0.00415,{"cveId":91,"description":92,"publishedDate":88,"cvssScore":54,"cvssVersion":47,"severity":55,"isKev":16,"epssScore":89},"CVE-2022-39871","Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts.",{"cveId":94,"description":95,"publishedDate":88,"cvssScore":54,"cvssVersion":47,"severity":55,"isKev":16,"epssScore":89},"CVE-2022-39865","Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.",[],{"title":98,"metaDescription":99,"keywords":100,"structuredData":101},"Smartthings by Samsung - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Smartthings by Samsung covering 8 versions with 20 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Smartthings vulnerabilities, Smartthings security, Smartthings CVE, Samsung Smartthings, Smartthings threat intelligence, Samsung security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":102,"@type":103,"name":104,"description":99,"url":105,"manufacturer":106,"applicationCategory":110,"softwareVersion":111,"mainEntity":112},"https:\u002F\u002Fschema.org","SoftwareApplication","Smartthings","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsamsung\u002Fsmartthings",{"@type":107,"name":108,"url":109},"Organization","Samsung","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsamsung","Security Software","8 versions tracked",{"@type":113,"name":114,"description":115,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Smartthings Security Vulnerabilities","Security vulnerabilities affecting Smartthings by Samsung",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":117,"apiVersion":118},"2026-10-28T21:18:52.776Z","3.0",{"rows":120,"total":11,"capped":16,"failed":11},[],[122],{"product":123,"cves":124},"smartthings_firmware",3]