Known vulnerabilities in SmartThings

Vendor: Samsung
Software: SmartThings
Software CPE: cpe:2.3:a:samsung:smartthings:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SmartThings SmartThings is affected by 12 known vulnerabilities: 10 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140860 - Improper Access Control
CVE-2026-21084
CWE-284 Low
No
No
1.8.47.24 04.08.2026 SB2026080452
#VU105958 - Improper Verification of Cryptographic Signature
CVE-2025-2233
CWE-347 Medium
No
No
- 24.03.2025 SB2025032408
#VU93629 - Improper Authentication
CVE-2024-34596
CWE-287 Medium
No
No
1.8.17 02.07.2024 SB2024070252
#VU87996 - Improper Verification of Intent by Broadcast Receiver
CVE-2024-20852
CWE-925 Low
No
No
1.8.13.22 02.04.2024 SB2024040244
#VU68333 - Improper Access Control
CVE-2022-39865
CWE-284 Medium
No
No
1.7.89.0 14.10.2022 SB2022101441
#VU68332 - Improper Access Control
CVE-2022-39866
CWE-284 Medium
No
No
1.7.89.0 14.10.2022 SB2022101441
#VU68331 - Improper Access Control
CVE-2022-39867
CWE-284 Medium
No
No
1.7.89.0 14.10.2022 SB2022101441
#VU68330 - Improper Access Control
CVE-2022-39868
CWE-284 Medium
No
No
1.7.89.0 14.10.2022 SB2022101441
#VU68329 - Improper Access Control
CVE-2022-39869
CWE-284 Medium
No
No
1.7.89.0 14.10.2022 SB2022101441
#VU68327 - Improper Access Control
CVE-2022-39870
CWE-284 Medium
No
No
1.7.89.0 14.10.2022 SB2022101441
#VU68326 - Improper Access Control
CVE-2022-39871
CWE-284 Medium
No
No
1.7.89.0 14.10.2022 SB2022101441
#VU68325 - Improper Access Control
CVE-2022-39864
CWE-284 Medium
No
No
1.7.89.25 14.10.2022 SB2022101436