CVE-2022-30749 LOW

CVE-2022-30749

Vendor Samsung Mobile
Product Smart Things
Weakness CWE-287 · Improper authentication
Published June 7, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

3.3/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.

Key dates

02Disclosure timeline

June 7, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-49843 FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto` CVE-2026-52845 Caddy: FastCGI header normalization bypass in `forward_auth copy_headers` CVE-2026-46705 russh server userauth state is not reset when authentication principal changes CVE-2023-5502 On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication. CVE-2026-50559 Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities