CVE-2015-5729: samsung m288ofw_firmware
Vulnerability summary
CVE-2015-5729 is a critical (CVSS 9.8) vulnerability in samsung m288ofw_firmware. EPSS estimates a 4.97% chance of exploitation in the next 30 days, higher than 92% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 23-03-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.97%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.97% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (kaoticoneutral.blogspot.com.ar)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Samsung6 products
- m288ofw_firmwarena
- nt14u_firmwaret-nt14uakucb-1008.0 | t-nt14udeucb-1007.1 | t-nt14udcncb-1003.1
- x10p_firmwaret-mst10pibrcb-1104.0 | t-mst10pauscp-1302.0 | t-mst10pdeucb-1210.0
- x12_firmwaret-mst12akucb-1114.0 | t-mst12deucb-1111.4
- x14h_firmwaret-mst14dcncb-1010.0 | t-mst14akucb-1100.4 | t-mst14deucb-1023.0
1 vendor · 6 products
References
6 links- packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2015/Dec/79Mailing ListX Refsource FULLDISCThird Party AdvisoryVDB Entry
- kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.htmlX Refsource MISCExploitTechnical DescriptionThird Party Advisory