High severity7.3NVD Advisory· Published Jun 23, 2022· Updated Jun 17, 2026

CVE-2021-26638

Description

Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control.

Affected products

Xi S&D Inc./S&D smarthome (smartcare)v5
Range: unspecified
Xisnd/S\&d Smarthome
cpe:2.3:a:xisnd:s\&d_smarthome:*:*:*:*:*:android:*:*
Range: <=3.2.48
S&D/smartcarellm-create
S&D/smarthomellm-create

Patches

Vulnerability mechanics

References

www.krcert.or.kr/krcert/secNoticeView.donvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000