Lucene search

[email protected]NVD:CVE-2015-5729

HistoryMar 23, 2017 - 8:59 p.m.

CVE-2015-5729

2017-03-2320:59:00

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.018

Percentile

88.6%

JSON

The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.

Affected configurations

Nvd

Node

samsungnt14u_firmwareMatcht-nt14uakucb-1008.0

AND

samsungnt14u_usMatch-

Node

samsungx14j_firmwareMatcht-ms14jakucb-1102.5

AND

samsungx14j_usMatch-

Node

samsungx14h_firmwareMatcht-mst14dcncb-1010.0

AND

samsungx14h_cnMatch-

Node

samsungx12_firmwareMatcht-mst12akucb-1114.0

AND

samsungx12_usMatch-

Node

samsungx10p_firmwareMatcht-mst10pibrcb-1104.0

AND

samsungx10p_ibrMatch-

Node

samsungnt14u_firmwareMatcht-nt14udeucb-1007.1

AND

samsungnt14u_euMatch-

Node

samsungnt14u_firmwareMatcht-nt14udcncb-1003.1

AND

samsungnt14u_cnMatch-

Node

samsungx14j_firmwareMatcht-ms14jdeucb-1018.0

AND

samsungx14j_euMatch-

Node

samsungx14j_firmwareMatcht-ms14jdcncb-1004.2

AND

samsungx14j_cnMatch-

Node

samsungx14h_firmwareMatcht-mst14akucb-1100.4

AND

samsungx14h_usMatch-

Node

samsungx14h_firmwareMatcht-mst14deucb-1023.0

AND

samsungx14h_euMatch-

Node

samsungx12_firmwareMatcht-mst12deucb-1111.4

AND

samsungx12_euMatch-

Node

samsungx10p_firmwareMatcht-mst10pauscp-1302.0

AND

samsungx10p_usMatch-

Node

samsungx10p_firmwareMatcht-mst10pdeucb-1210.0

AND

samsungx10p_euMatch-

Node

samsungm288ofw_firmwareMatch-

AND

samsungm288ofwMatch-

VendorProductVersionCPE
samsungnt14u_firmwaret-nt14uakucb-1008.0cpe:2.3:o:samsung:nt14u_firmware:t-nt14uakucb-1008.0:*:*:*:*:*:*:*
samsungnt14u_us-cpe:2.3:h:samsung:nt14u_us:-:*:*:*:*:*:*:*
samsungx14j_firmwaret-ms14jakucb-1102.5cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*
samsungx14j_us-cpe:2.3:h:samsung:x14j_us:-:*:*:*:*:*:*:*
samsungx14h_firmwaret-mst14dcncb-1010.0cpe:2.3:o:samsung:x14h_firmware:t-mst14dcncb-1010.0:*:*:*:*:*:*:*
samsungx14h_cn-cpe:2.3:h:samsung:x14h_cn:-:*:*:*:*:*:*:*
samsungx12_firmwaret-mst12akucb-1114.0cpe:2.3:o:samsung:x12_firmware:t-mst12akucb-1114.0:*:*:*:*:*:*:*
samsungx12_us-cpe:2.3:h:samsung:x12_us:-:*:*:*:*:*:*:*
samsungx10p_firmwaret-mst10pibrcb-1104.0cpe:2.3:o:samsung:x10p_firmware:t-mst10pibrcb-1104.0:*:*:*:*:*:*:*
samsungx10p_ibr-cpe:2.3:h:samsung:x10p_ibr:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	nt14u_firmware	t-nt14uakucb-1008.0	cpe:2.3:o:samsung:nt14u_firmware:t-nt14uakucb-1008.0:::::::*
samsung	nt14u_us	-	cpe:2.3:h:samsung:nt14u_us:-:::::::*
samsung	x14j_firmware	t-ms14jakucb-1102.5	cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:::::::*
samsung	x14j_us	-	cpe:2.3:h:samsung:x14j_us:-:::::::*
samsung	x14h_firmware	t-mst14dcncb-1010.0	cpe:2.3:o:samsung:x14h_firmware:t-mst14dcncb-1010.0:::::::*
samsung	x14h_cn	-	cpe:2.3:h:samsung:x14h_cn:-:::::::*
samsung	x12_firmware	t-mst12akucb-1114.0	cpe:2.3:o:samsung:x12_firmware:t-mst12akucb-1114.0:::::::*
samsung	x12_us	-	cpe:2.3:h:samsung:x12_us:-:::::::*
samsung	x10p_firmware	t-mst10pibrcb-1104.0	cpe:2.3:o:samsung:x10p_firmware:t-mst10pibrcb-1104.0:::::::*
samsung	x10p_ibr	-	cpe:2.3:h:samsung:x10p_ibr:-:::::::*

Rows per page:

1-10 of 301

References

kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html

packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html

seclists.org/fulldisclosure/2015/Dec/79

www.securityfocus.com/bid/79675

www.securitytracker.com/id/1034503

www.securitytracker.com/id/1034504

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.018

Percentile

88.6%

JSON

Related for NVD:CVE-2015-5729

zdt1 cvelist1 cve1 prion1