Lucene search

[email protected]CVE-2023-41270

HistoryNov 08, 2023 - 7:15 a.m.

CVE-2023-41270

2023-11-0807:15:27

CWE-307

[email protected]

web.nvd.nist.gov

cve-2023-41270

vulnerability

samsung smart tv

denial of service

wps attack

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before allows attackers to cause a denial of service via WPS attack tools.

Affected configurations

NVD

Node

samsungue40d7000_firmwareRange≤t-gapdeuc-1033.2

AND

samsungue40d7000Match-

CPENameOperatorVersion
samsung:ue40d7000_firmwaresamsung ue40d7000 firmwarelet-gapdeuc-1033.2

CPE	Name	Operator	Version
samsung:ue40d7000_firmware	samsung ue40d7000 firmware	le	t-gapdeuc-1033.2

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "UE40D7000",
    "vendor": "Samsung TV",
    "versions": [
      {
        "lessThanOrEqual": "T-GAPDEUC-1033",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.slideshare.net/fuguet/smold-tv-old-smart

www.youtube.com/watch?v=MdIT4mPTX3s

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVE-2023-41270

cvelist1 nvd1 prion1