Lucene search

[email protected]CVE-2014-3911

HistoryJun 11, 2014 - 2:55 p.m.

CVE-2014-3911

2014-06-1114:55:09

CWE-94

[email protected]

web.nvd.nist.gov

samsung

ipolis

device manager

remote code execution

cve-2014-3911

nvd

7.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.134 Low

EPSS

Percentile

95.6%

JSON

Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control.

Affected configurations

NVD

Node

samsungipolis_device_managerRange≤1.8.2

CPENameOperatorVersion
samsung:ipolis_device_managersamsung ipolis device managerle1.8.2

CPE	Name	Operator	Version
samsung:ipolis_device_manager	samsung ipolis device manager	le	1.8.2

References

update.websamsung.net/Tools/iPOLiS%20Device%20Manager/iPOLiS%20Device%20Manager_v1.8.7_setup_Full.zip

www.securityfocus.com/bid/67822

www.zerodayinitiative.com/advisories/ZDI-14-167/

www.zerodayinitiative.com/advisories/ZDI-14-168/

www.zerodayinitiative.com/advisories/ZDI-14-170/

www.zerodayinitiative.com/advisories/ZDI-14-171/

www.zerodayinitiative.com/advisories/ZDI-14-172/

7.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.134 Low

EPSS

Percentile

95.6%

JSON

Related for CVE-2014-3911

nvd1 zdi5 prion1 cvelist1 packetstorm1