CVE-2025-2233
CVSS 3.0 Score 8.8 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 347
Summary
CVE-2025-2233 is a vulnerability affecting Samsung SmartThings that allows network-adjacent attackers to bypass authentication without requiring it. The issue lies in the Hub Local API service, which listens on TCP port 8766, and stems from the absence of proper verification of cryptographic signatures. This flaw enables attackers to circumvent authentication on the system, posing a significant security risk. The vulnerability was identified as ZDI-CAN-25615.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- SmartThings