CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing…

Medium · published April 2, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00135 · 2.7th percentile
Published
2024-04-02T02:59Z
EPSS history
Timeline
  • 02 APR 02:59Z
    Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing…
    cvelistv5