119 matches found
Samsung Printer Scx-6x55x 安全漏洞
The Samsung Printer Scx-6x55x is a laser multifunction printer from Samsung South Korea. A security vulnerability exists in the Samsung Printer Scx-6x55x, which originates in the product's SyncThru Web service that allows access to SMB user lists and plaintext passwords via HTML source code...
PT-2021-23697 · Samsung · Samsung Scx-6X55X
Name of the Vulnerable Software and Affected Versions: Samsung SCX-6x55X printers affected versions not specified Description: The issue allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code of the SyncThru Web Service. Authentication is...
Unauthorized Access Vulnerability in SCX-8821 at Samsung (China) Investment Co.
SCX-8821 is a printer from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SCX-8821, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in SCX-8240 at Samsung (China) Investment Co.
The SCX-8240 is an all-in-one printer from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SCX-8240, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in SCX-8123 at Samsung (China) Investment Co.
The SCX-8123 is a multifunction printer from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SCX-8123, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in SCX-8025 at Samsung (China) Investment Co.
The SCX-8025 is a multifunction printer from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SCX-8025, which can be exploited by attackers to obtain sensitive information...
Samsung SCX-824 Cross-Site Scripting Vulnerability
The Samsung SCX-824 is a multifunction printer from Samsung South Korea. A cross-site scripting vulnerability exists in the Samsung SCX-824. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute...
Cross site scripting
Samsung SCX-824 printers allow a reflected Cross-Site-Scripting XSS vulnerability that can be triggered by using the "print from file" feature, as demonstrated by the sws/swsAlert.sws?popupid=successMsg msg parameter...
CVE-2019-12315
CVE-2019-12315 concerns Samsung SCX-824 printers, where a reflected XSS vulnerability exists in the web/print workflow. The issue is triggered via the printer’s “print from file” feature, specifically through the sws/swsAlert.sws?popupid=successMsg msg parameter. Multiple connected records consis...
Code injection
Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP requests...
CVE-2018-17969
Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP requests...
CVE-2018-17969
CVE-2018-17969 affects Samsung SCX-6545X printers (V2.00.03.01) and enables remote disclosure of cleartext credentials via SNMP requests (OIDs: iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and .6.0). The Connected documents corroborate credential disclosure via SNMP, describing the affected device and d...
CVE-2018-17969
Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP requests...
Samsung SyncThruWeb SMB Hash Disclosure
Exploit Title: Samsung SyncThruWeb SMB Hash Disclosure Date: 8/28/15 Exploit Author: Shad Malloy Contact: http://twitter.com/SecureNM Website: https://securenetworkmanagement.com Vendor Homepage: http://www.samsung.com Software Link:...
CVE-2007-3931
The wrapsetuidthirdpartyapplication function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges...
Design/Logic Flaw
The wrapsetuidthirdpartyapplication function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges...
CVE-2007-3931
The wrapsetuidthirdpartyapplication function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges...
CVE-2007-3931
CVE-2007-3931 affects the Samsung SCX-4200 Driver 2.00.95 installation script. The wrap_setuid_third_party_application function grants setuid permissions to third-party applications (e.g., xsane, xscanimage), enabling local users to escalate privileges. Documented impact is privilege escalation f...
