VULNERABILITY INTELLIGENCE

CVE-2021-25446

CVSS score5.3 MEDIUM

EPSS probability0.81%

CISA KEVNot currently listed

Published2021-08-05

Last modified2026-06-17

Description

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.