Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Filtered by product Syncthru Web Service
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-35309 1 Samsung 1 Syncthru Web Service 2023-08-28 N/A 7.5 HIGH
An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks.
CVE-2021-42913 1 Samsung 3 Scx-6555, Scx-6555n, Syncthru Web Service 2023-08-08 5.0 MEDIUM 7.5 HIGH
The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required.
CVE-2018-14908 1 Samsung 1 Syncthru Web Service 2018-09-27 6.8 MEDIUM 8.8 HIGH
Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action.