GCVE - cpe:2.3:a:samsung:smartviewer:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:samsung:smartviewer:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Samsung (`0eb241f7-997b-5d1c-b2a3-00a89e1049d3`)
Product	Smartviewer (`88e7cd96-85f1-5879-a314-394e8df47d15`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-11689`	vulnerable	2026-06-08 05:10:38.804248	Details available Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.) Published: 2018-06-14T20:00:00.000Z Updated: 2024-08-05T08:17:08.457Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/542083/100/0/threaded https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11689 https://drive.google.com/file/d/1aWbvdrx1KRkUv4ikkm530a2N5qrxCLmr/view?usp=sharing https://seclists.org/bugtraq/2018/Jun/40	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8040`	vulnerable	2026-06-08 05:07:02.965294	Details available The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value. Published: 2015-11-02T19:00:00.000Z Updated: 2024-08-06T08:06:31.681Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/77084 http://www.zerodayinitiative.com/advisories/ZDI-15-464	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8039`	vulnerable	2026-06-08 05:07:02.964786	Details available Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference. Published: 2015-11-02T19:00:00.000Z Updated: 2024-08-06T08:06:31.560Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/77079 http://www.zerodayinitiative.com/advisories/ZDI-15-463 http://www.zerodayinitiative.com/advisories/ZDI-15-462	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9265`	vulnerable	2026-06-08 05:06:11.249764	Details available Stack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors. Published: 2014-12-08T16:00:00.000Z Updated: 2024-08-06T13:40:25.150Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/71486 http://www.zerodayinitiative.com/advisories/ZDI-14-401/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.