← Back to CVE List
CVE-2022-39870
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt