Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.Referenceshttps://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
