Samsung SRN-1670D
Approved changes feed: RSS · Atom
cpe:2.3:h:samsung:srn-1670d:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Samsung (0eb241f7-997b-5d1c-b2a3-00a89e1049d3) |
|---|---|
| Product | Srn 1670D (27e1c3d6-ced1-58f5-949f-a04c7bd125f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-16524 |
not_vulnerable | 2026-06-08 05:09:00.460671 |
Details available
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI.
Published: 2017-11-06T08:00:00.000Z
Updated: 2024-08-05T20:27:03.694Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.