Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2015-3435

Published: 01/05/2015 Updated: 06/12/2016
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Samsung Security Manager

Vulnerability Summary

Samsung Security Manager (SSM) prior to 1.31 allows remote malicious users to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request.

Vulnerable Product Search on Vulmon Subscribe to Product

samsung samsung security manager

Exploits

Exploit DB: Samsung Security Manager 1.5 ActiveMQ Broker Service PUT Method Remote Code Execution
This is an exploit against Samsung Security Manager that bypasses the patch in CVE-2015-3435 by exploiting the vulnerability against the client side This exploit has been tested successfully against IE, FireFox and Chrome by abusing a GET request XSS to bypass CORS and reach the vulnerable PUT Finally, a traversal is used in the PUT request to up ...

References

CWE-264http://www.zerodayinitiative.com/advisories/ZDI-15-156/http://www.zerodayinitiative.com/advisories/ZDI-15-157/http://www.securityfocus.com/bid/74400https://nvd.nist.govhttps://packetstormsecurity.com/files/138194/Samsung-Security-Manager-1.5-ActiveMQ-Broker-Service-PUT-Method-Remote-Code-Execution.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook