CVE-2022-30746: Samsung Smartthings

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.

Affected products

• Samsung Smartthings: before 1.7.85.12 (fixed in 1.7.85.12)

Published 2022-06-07. Last modified 2026-06-17.