CVE-2021-25508CWE-269

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation

Medium · published November 5, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00827 · 57.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-11-05T02:04Z
EPSS history
Timeline
  • 05 NOV 02:04Z
    Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation
    cvelistv5