Vulnerability CVE-2015-5729

Vulnerability CVE-2015-5729

Published: 2017-03-23

Description:

The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.

See advisories in our WLB2 database:

	Topic	Author	Date
Med.	Samsung SoftAP Weak Password	Augusto Pereyra	19.12.2015

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5/10	2.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	None	None

Affected software
Samsung -> X12 firmware
Samsung -> X10p firmware
Samsung -> Nt14u firmware
Samsung -> X14j firmware
Samsung -> X14h firmware
Samsung -> M288ofw firmware

References:

http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html

http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html

http://seclists.org/fulldisclosure/2015/Dec/79

http://www.securityfocus.com/bid/79675

http://www.securitytracker.com/id/1034503

http://www.securitytracker.com/id/1034504

Copyright 2024, cxsecurity.com