CVE-2021-26638

Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:xisnd:s\&d_smarthome:*:*:*:*:*:android:*:*

History

30 Jun 2022, 14:33

Type Values Removed Values Added
First Time Xisnd
Xisnd s\&d Smarthome
CWE CWE-287
CPE cpe:2.3:a:xisnd:s\&d_smarthome:*:*:*:*:*:android:*:*
References (MISC) https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66783 - (MISC) https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66783 - Third Party Advisory, VDB Entry
CVSS v2 : unknown
v3 : unknown
v2 : 10.0
v3 : 9.8

23 Jun 2022, 17:19

Type Values Removed Values Added
New CVE

Information

Published : 2022-06-23 17:15

Updated : 2022-06-30 14:33


NVD link : CVE-2021-26638

Mitre link : CVE-2021-26638


JSON object : View

Products Affected

xisnd

  • s\&d_smarthome
CWE
CWE-287

Improper Authentication