Samsung: Security Vulnerabilities
An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop.
CVSS Score
7.5
EPSS Score
0.005
Published
2023-08-28
An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks.
CVSS Score
7.5
EPSS Score
0.004
Published
2023-08-22
A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi
CVSS Score
6.1
EPSS Score
0.003
Published
2023-08-22
Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.
CVSS Score
7.3
EPSS Score
0.002
Published
2023-08-16
Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name.
CVSS Score
6.8
EPSS Score
0.004
Published
2023-08-14
Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.
CVSS Score
4.3
EPSS Score
0.004
Published
2023-08-14
Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.
CVSS Score
6.8
EPSS Score
0.017
Published
2023-08-14
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
CVSS Score
4.4
EPSS Score
0.002
Published
2023-08-10
An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
CVSS Score
4.4
EPSS Score
0.002
Published
2023-08-10
Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege.
CVSS Score
5.5
EPSS Score
0.001
Published
2023-08-10