CVE-2017-16524: hanwhasecurity web_viewer
Vulnerability summary
CVE-2017-16524 is a high (CVSS 8.8) vulnerability in hanwhasecurity web_viewer. EPSS estimates a 30.30% chance of exploitation in the next 30 days, higher than 98.2% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 06-11-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
30.30%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
+5.07 pp
From 25.23% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundCve 2017 16524
Maturity: poc
Samsung SRN-1670D Web Viewer Version 1.0.0.193 Arbitrary File Read and Upload
exploit/linux/http/samsung_srv_1670d_upload_exec
Maturity: weaponized
Web Viewer 1.0.0.193 (Samsung SRN-1670D) - Unrestricted File Upload
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Hanwhasecurity1 product
- web_viewer1.0.0.193
1 vendor · 1 product
References
2 links- www.exploit-db.com/exploits/43138/ExploitX Refsource EXPLOIT DBIssue TrackingThird Party AdvisoryVDB Entry
- github.com/realistic-security/CVE-2017-16524X Refsource MISCExploitIssue TrackingThird Party Advisory