high7.6Public exploit code
CVE-2013-3586
Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samsung DVR Firmware 1.10 - Authentication Bypass2013-08-21 · webapps · hardware
Impact
Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Smart Viewer | All versions |
| Samsung | Dvr | All versions |