VendorsSamsungsmart_viewerany version
Vulnerabilities

Samsung Smart Viewer any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

3CVEs
CVE-2013-3586
Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.
Published 2013-08-28 · Modified
7.61 PoCEPSS 0.112
CVE-2014-9266
The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors.
Published 2014-12-08 · Modified
6.8EPSS 0.026
CVE-2013-3585
Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving (1) direct access to a file or (2) the user-setup web page.
Published 2013-08-28 · Modified
5.01 PoCEPSS 0.235