medium5.0Public exploit code
CVE-2013-3585
Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vector…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samsung DVR Firmware 1.10 - Authentication Bypass2013-08-21 · webapps · hardware
Impact
Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving (1) direct access to a file or (2) the user-setup web page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Smart Viewer | All versions |