CVE-2022-39864: Samsung Smartthings

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent.

Affected products

• Samsung Smartthings: before 1.7.85.25 (fixed in 1.7.85.25)

Published 2022-10-07. Last modified 2026-06-17.