Samsung Smartviewer vulnerabilities

4 vulnerabilities

Known vulnerabilities in Samsung Smartviewer, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-11689hanwha-securityhrd-1641_firmware+9
EPSS score
1.57%
Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)6.8CVE-2015-8040samsungsmartviewer
EPSS score
3.36%
The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value.6.8CVE-2015-8039samsungsmartviewer
EPSS score
3.89%
Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference.6.8CVE-2014-9265samsungsmartviewer
EPSS score
4.02%
Stack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors.