description: Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.
problem types: CWE-284 Improper Access Control
affected:
{
product: Smart Things
vendor: Samsung Mobile
versions:
lessThan: 1.7.67.25, status: affected, version: -, versionType: custom
}
metrics:
other: [
content: {'vectorString': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N'}
type: unknown
]