CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Prion•added 2018/08/27 3:29 p.m.•28 views

Cross site request forgery (csrf)

An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated messages to SmartThings' remote servers, which incorrectly handle camera IDs for the 'sync'...

6.4CVSS7.7AI score0.00989EPSS

SaveExploits2References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/08/27 12:00 a.m.•3 views

CVE-2018-3918: Improper Neutralization

7.5CVSS6.9AI score0.00989EPSS

SaveExploits2References2

seebug.org•added 2018/07/30 12:00 a.m.•580 views

Samsung SmartThings Hub hubCore port 39500 sync denial-of-service vulnerability(CVE-2018-3918)

Summary An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub. The hubCore process listens on port 39500 and relays any unauthenticated messages to SmartThings' remote servers, which incorrectly handle camera IDs for the "sync" operation, leading to arbitrary deleti...

0.2AI score0.00989EPSS

SaveExploits2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by