SAMSUNG Smart Switch PC DLL Hijacking Vulnerability

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. SAMSUNG Smart Switch PC suffers from a DLL hijacking vulnerability that originates when a process attempts to load a DLL without specifying the absolute path to the DLL. An attacker can exploit...

CVE-2022-33182. Privilege escalation using switch commands "supportlink", "firmwaredownload", "portcfgupload","license", and "fosexec".

Security Advisory ID : BSA-2022-2084 Component : FOS Revision : 2.0 A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands "supportlink...

CVE-2022-33181. Information disclosure vulnerability in Brocade Fabric OS CLI using switch commands “configshow” and “supportlink”.

Security Advisory ID : BSA-2022-2083 Component : FOS Revision : 1.1 An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a local authenticated attacker to read sensitive files using switch commands...

CVE-2022-39844

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-39846

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...

CVE-2022-39846

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...

CVE-2022-39844

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-39844

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-39846

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...

Code injection

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...

Input validation

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-39846

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...

CVE-2022-39844

CVE-2022-39844 affects Samsung Smart Switch PC on Windows, prior to version 4.3.22083. The issue is improper validation of integrity checks in Smart Switch PC, enabling a local attacker to delete arbitrary directories via directory junctions. Impact is local, with no remote access or user interac...

CVE-2022-39846

The vulnerability CVE-2022-39846 affects Samsung Smart Switch PC for Windows, where DLL hijacking can occur when a DLL is loaded without an absolute path. This can allow an attacker to execute arbitrary code on the target host. Affected software is Smart Switch PC versions prior to 4.3.22083_3. T...

SAMSUNG Smart Switch PC 安全漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. A security vulnerability exists in SAMSUNG Smart Switch PC prior to version 4.3.22083, which stems from an improper validation of its integrity check that could be exploited by a local attacker t...

PT-2022-25033 · Samsung · Smart Switch Pc

Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.22083 Description: The issue is related to improper validation of integrity checks, allowing local attackers to delete arbitrary directories using directory junctions. Recommendations: For versions prior ...

PT-2022-25035 · Samsung · Smart Switch Pc

Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.22083 3 Description: The issue allows an attacker to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 4.3.22083 3, update to version 4.3.22083 3 or late...

CVE-2022-23687

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23682

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

CVE-2022-23686

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...