CVE-2022-30749: Samsung Smartthings

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.

Affected products

• Samsung Smartthings: before 1.7.85.25 (fixed in 1.7.85.25)

Published 2022-06-07. Last modified 2026-06-17.