CVE-2021-25447

Samsung Mobile / Smart Things PUBLISHED

Description (CNA)

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.

Affected (CNA)

Vendor / product	Versions
Samsung Mobile / Smart Things	affected - before 1.7.67.25

CWE

CWE-284

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=8

ADP enrichment

CVE

No English description supplied.

https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=8