Samsung iPolis Detection

Detection of Samsung iPolis. The script sends a connection request to the server and attempts to detect the web interface for Samsung iPolis. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Samsung iPolis Default Credentials (HTTP)

The remote installation of Samsung iPolis is using known default credentials. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published b...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...

Samsung iPOLiS 1.12.2 ReadConfigValue Remote Code Execution

var shellcode =...

Samsung iPOLiS ReadConfigValue Remote Code Execution Exploit

Exploit for windows platform in category remote exploits var shellcode =...

Samsung iPOLiS - ReadConfigValue Remote Code Execution

var shellcode =...

Samsung iPOLiS Device Manager Buffer Overflow Vulnerability

Samsung iPOLiS Device Manager is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Samsung iPOLiS Device Manager Buffer Overflow Vulnerability

Samsung iPOLiS Device Manager is a device manager from Samsung South Korea that helps manage multiple IP network devices through customized applications. A buffer overflow vulnerability exists in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager version 1.12.2, whic...

CVE-2015-0555

Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the 1 ReadConfigValue or 2 WriteConfigValue function...

Buffer overflow

Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the 1 ReadConfigValue or 2 WriteConfigValue function...

CVE-2015-0555

Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the 1 ReadConfigValue or 2 WriteConfigValue function...

Samsung iPOLiS 1.12.2 - iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue PoC

Exploit for windows platform in category dos / poc Samsung iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue Remote Code Execution PoC var arg1 = ""; var arg2="praveend"; for i=0; i !-- Stack Trace Exception Code: ACCESSVIOLATION Disasm: 149434 MOV AL,ESI+EDX Seh Chain:...

Samsung iPOLiS 1.12.2 - iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue (PoC)

Samsung iPOLiS 1.12.2 - iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue PoC Samsung iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue Remote Code Execution PoC var arg1 = ""; var arg2="praveend"; for i=0; i !-- Stack Trace Exception Code: ACCESSVIOLATION Disasm: 149434 MOV AL,ESI+ED...

Samsung iPOLiS 1.12.2 - iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue (PoC)

Samsung iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue Remote Code Execution PoC var arg1 = ""; var arg2="praveend"; for i=0; i !-- Stack Trace Exception Code: ACCESSVIOLATION Disasm: 149434 MOV AL,ESI+EDX Seh Chain: -------------------------------------------------- 1 647C7D7D mfc100.dl...

Samsung iPolis Buffer Overflow

CVE-2015-0555 Introduction There is a Buffer Overflow Vulnerability which leads to Remote Code Execution. Vulnerability is due to input validation to the API ReadConfigValue and WriteConfigValue API's in XnsSdkDeviceIpInstaller.ocx This is different from CVE-2014-3911 as the version of iPolis...

Samsung iPOLiS Device Manager FindConfigChildeKeyList Buffer Overflow (CVE-2014-3912)

A stack-based buffer overflow vulnerability has been reported in Samsung iPOLiS Device Manager. The vulnerability is due to insufficient input validation in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller ActiveX control. A remote attacker can exploit these vulnerabilities by enticing a user to...

CVE-2014-3911

Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the 1 Start, 2 ChangeControlLocalName, 3 DeleteDeviceProfile, 4 FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control...