Vulnerability in Samsung Dvr
CVE-2013-3585
Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving (1) direct access to a file or (2) the user-setup web page.
EPSS: 0.235 (97.6th percentile) — read the EPSS interpretation.
Affected products
- Samsung Dvr
- Samsung Smart_viewer
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)