← back
CVE-2021-25446CWE-284

CVE-2021-25446

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
exploitation probability
0.8%top 44% of all CVEs
observed exploitation
nono source reports it
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.