CVE-2022-39870 Information

Description

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast.

Reference

https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=10