CVE-2019-7421

Опубликовано: 21 мар. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.

Ссылки

http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Feb/28
Exploit
Mailing List
Third Party Advisory
http://www.samsung.com/Support/ProductSupport/download/index.aspx
Product
http://www.samsungprinter.com/
Product
http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Feb/28
Exploit
Mailing List
Third Party Advisory
http://www.samsung.com/Support/ProductSupport/download/index.aspx
Product
http://www.samsungprinter.com/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:samsung:syncthru_web_service:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:samsung:x7400gx_firmware:6.a6.25:*:*:*:*:*:*:*

cpe:2.3:h:samsung:x7400gx:-:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00555

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-r3wq-v7xc-m5hr