9.8

CVE-2015-5729

Exploit
The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ Nt14u Firmware Version t-nt14uakucb-1008.0
   Samsung ≫ Nt14u Us Version -
Samsung ≫ X14j Firmware Version t-ms14jakucb-1102.5
   Samsung ≫ X14j Us Version -
Samsung ≫ X14h Firmware Version t-mst14dcncb-1010.0
   Samsung ≫ X14h Cn Version -
Samsung ≫ X12 Firmware Version t-mst12akucb-1114.0
   Samsung ≫ X12 Us Version -
Samsung ≫ X10p Firmware Version t-mst10pibrcb-1104.0
   Samsung ≫ X10p Ibr Version -
Samsung ≫ Nt14u Firmware Version t-nt14udeucb-1007.1
   Samsung ≫ Nt14u Eu Version -
Samsung ≫ Nt14u Firmware Version t-nt14udcncb-1003.1
   Samsung ≫ Nt14u Cn Version -
Samsung ≫ X14j Firmware Version t-ms14jdeucb-1018.0
   Samsung ≫ X14j Eu Version -
Samsung ≫ X14j Firmware Version t-ms14jdcncb-1004.2
   Samsung ≫ X14j Cn Version -
Samsung ≫ X14h Firmware Version t-mst14akucb-1100.4
   Samsung ≫ X14h Us Version -
Samsung ≫ X14h Firmware Version t-mst14deucb-1023.0
   Samsung ≫ X14h Eu Version -
Samsung ≫ X12 Firmware Version t-mst12deucb-1111.4
   Samsung ≫ X12 Eu Version -
Samsung ≫ X10p Firmware Version t-mst10pauscp-1302.0
   Samsung ≫ X10p Us Version -
Samsung ≫ X10p Firmware Version t-mst10pdeucb-1210.0
   Samsung ≫ X10p Eu Version -
Samsung ≫ M288ofw Firmware Version -
   Samsung ≫ M288ofw Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.97% 0.911
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html
Third Party Advisory
Exploit
Technical Description
http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html
Third Party Advisory
Exploit
VDB Entry
http://seclists.org/fulldisclosure/2015/Dec/79
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/79675
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034503
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034504
Third Party Advisory
VDB Entry