CVE-2022-30746CWE-285

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API

High · published June 7, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
59.0
In the wild
Unconfirmed
What it is

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00890 · 59.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2022-06-07T18:20Z
EPSS history
Timeline
  • 07 JUN 18:20Z
    Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API
    cvelistv5