GCVE-110-CERTCC-2013-882286

Advisory PublishedCVSS 7.6/10

Vulnetix · Advisory published August 21, 2013

Samsung Web Viewer for Samsung DVR contains multiple vulnerabilities including: Cleartext Storage in a File or on Disk (CWE-313) and Authentication Bypass by Assumed-Immutable Data (CWE-302).

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.6/10

High · AV:N/AC:H/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score5.4remediation_levelOFreport_confidenceUCenvironmental_score4.1target_distributionMenvironmental_vectorCDP:N/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2013-3586 CVE-2013-3585

Transitive aliases

VAR-201308-0209 GHSA-cppm-9cjp-3g84 GHSA-7jq9-c3hf-9cg3 GSD-2013-3586 GSD-2013-3585 VAR-201308-0208

References

Samsung Web Viewer for Samsung DVR allows authentication bypass and password disclosure

url

Samsung Web Viewer for Samsung DVR allows authentication bypass and password disclosure

url

Samsung Web Viewer for Samsung DVR allows authentication bypass and password disclosure

url

Samsung Web Viewer for Samsung DVR allows authentication bypass and password disclosure

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON