GCVE - cpe:2.3:a:samsung:syncthru_web_service:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:samsung:syncthru_web_service:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Samsung (`0eb241f7-997b-5d1c-b2a3-00a89e1049d3`)
Product	Syncthru Web Service (`3ca37411-256b-5458-b9cd-24b540699323`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-42913`	vulnerable	2026-06-08 05:35:23.042864	Details available The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required. Published: 2021-12-20T08:23:40.000Z Updated: 2024-08-04T03:47:12.377Z Open on db.gcve.eu Reference links https://security.samsungmobile.com/securityUpdate.smsb https://medium.com/%40windsormoreira/samsung-printer-scx-6x55x-improper-access-control-cve-2021-42913-bd50837e5e9a	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35309`	vulnerable	2026-06-08 05:32:48.630782	Details available An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks. Published: 2023-08-22T00:00:00.000Z Updated: 2024-10-03T18:17:56.413Z Open on db.gcve.eu Reference links https://security.samsungmobile.com/securityUpdate.smsb https://github.com/mustafa-turgut/cve-subscriptions/tree/main/samsung-stws	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7421`	vulnerable	2026-06-08 05:14:14.437711	Details available XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL. Published: 2019-03-17T19:59:07.000Z Updated: 2024-08-04T20:46:46.213Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html http://www.samsungprinter.com/ http://www.samsung.com/Support/ProductSupport/download/index.aspx http://seclists.org/fulldisclosure/2019/Feb/28	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7420`	vulnerable	2026-06-08 05:14:14.437217	Details available XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter. Published: 2019-03-17T19:57:26.000Z Updated: 2024-08-04T20:46:46.274Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html http://www.samsungprinter.com/ http://www.samsung.com/Support/ProductSupport/download/index.aspx http://seclists.org/fulldisclosure/2019/Feb/28	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7419`	vulnerable	2026-06-08 05:14:14.436483	Details available XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title. Published: 2019-03-17T19:53:18.000Z Updated: 2024-08-04T20:46:46.217Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html http://www.samsungprinter.com/ http://www.samsung.com/Support/ProductSupport/download/index.aspx http://seclists.org/fulldisclosure/2019/Feb/28	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7418`	vulnerable	2026-06-08 05:14:14.434884	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.