Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control.
References
| Link | Resource |
|---|---|
| https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66783 | Third Party Advisory VDB Entry |
Configurations
History
30 Jun 2022, 14:33
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 10.0
v3 : 9.8 |
| First Time |
Xisnd
Xisnd s\&d Smarthome |
|
| CWE | CWE-287 | |
| CPE | cpe:2.3:a:xisnd:s\&d_smarthome:*:*:*:*:*:android:*:* | |
| References | (MISC) https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66783 - Third Party Advisory, VDB Entry |
23 Jun 2022, 17:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-23 17:15
Updated : 2022-06-30 14:33
NVD link : CVE-2021-26638
Mitre link : CVE-2021-26638
JSON object : View
Products Affected
xisnd
- s\&d_smarthome
CWE
CWE-287
Improper Authentication