Read the docs

Samsung

Records2044All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical180CVSS 9.0–10.0
CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV
TI-2024-06858 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-04-24TI-2025-15038 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-11-10TI-2025-15039 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-10-02TI-2025-04133 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-05-22TI-2022-06595 Samsung Mobile Devices Use-After-Free Vulnerability Priority CRITICAL 93KEV 2023-09-18TI-2021-07610 Samsung Mobile Devices Unspecified Vulnerability Priority CRITICAL 89KEV 2023-06-29

Components

Products in the NVD configurations · select one to filter the records
Android 502 records CRITICAL Exynos 1380 Firmware 125 records MEDIUM Exynos 1280 Firmware 118 records HIGH Exynos 980 Firmware 114 records HIGH Exynos 1330 Firmware 99 records MEDIUM Exynos 1080 Firmware 97 records HIGH Exynos 850 Firmware 97 records HIGH Exynos 1480 Firmware 90 records MEDIUM

Records

40 records in Sth-eth-250 Firmware · all components

TI-2018-02872 CVE-2018-3904 · GHSA-w78f-68qf-58qw

Out-of-bounds write in Samsung

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01753 Published 2018-08-27 No fix listed CWE-787
TI-2018-02871 CVE-2018-3903 · GHSA-rfq8-x5m9-6822

Out-of-bounds write in Talos Samsung

Priority MEDIUM 46

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01804 Published 2018-08-23 No fix listed CWE-787
TI-2018-02870 CVE-2018-3902 · GHSA-p84x-62mj-7mcj

Out-of-bounds write in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01753 Published 2018-08-23 No fix listed CWE-787
TI-2018-02847 CVE-2018-3878 · GHSA-2r6c-crq4-rgxw

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01534 Published 2018-08-23 No fix listed CWE-119
TI-2018-02846 CVE-2018-3877 · GHSA-g89f-v8gf-6v8f

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01804 Published 2018-09-21 No fix listed CWE-119
TI-2018-02844 CVE-2018-3875 · GHSA-98wj-w9r7-fcxv

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01534 Published 2018-09-10 No fix listed CWE-119
TI-2018-02843 CVE-2018-3874 · GHSA-h4q5-v8j4-8ph5

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01802 Published 2018-09-21 No fix listed CWE-119
TI-2018-02842 CVE-2018-3873 · GHSA-223p-pjp4-9vv5

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01804 Published 2018-09-21 No fix listed CWE-119
TI-2018-02841 CVE-2018-3872 · GHSA-f4xw-c8jp-828g

Memory corruption in Samsung

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01753 Published 2018-08-23 No fix listed CWE-119
TI-2018-02837 CVE-2018-3867 · GHSA-gwh8-27m5-c3g7

Out-of-bounds write in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02014 Published 2018-08-23 No fix listed CWE-787
TI-2018-02836 CVE-2018-3866 · GHSA-mmxq-hfwc-p6xp

Out-of-bounds write in Samsung

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01534 Published 2018-08-23 No fix listed CWE-787
TI-2018-02833 CVE-2018-3863 · GHSA-h4gv-m9gr-hhjw

Out-of-bounds write in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01736 Published 2018-08-23 No fix listed CWE-787
TI-2018-02893 CVE-2018-3925 · GHSA-c386-q463-gpx2

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 45

An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01475 Published 2018-08-23 No fix listed CWE-119
TI-2018-02873 CVE-2018-3905 · GHSA-755q-vpcq-4v46

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 45

An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01489 Published 2018-08-23 No fix listed CWE-119
TI-2018-02849 CVE-2018-3880 · GHSA-8f53-7gp7-39vp

Out-of-bounds write in Samsung

Priority MEDIUM 45

An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01242 Published 2018-08-23 No fix listed CWE-787
TI-2018-02887 CVE-2018-3919 · GHSA-g8qq-c3mq-hwqc

Out-of-bounds write in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 44

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00946 Published 2018-08-23 No fix listed CWE-787
TI-2018-02885 CVE-2018-3917 · GHSA-4cj2-6mm4-h548

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 44

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00946 Published 2018-08-23 No fix listed CWE-119
TI-2018-02864 CVE-2018-3895 · GHSA-624g-xqw5-ccp4

Buffer overflow in Samsung

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01804 Published 2018-08-28 No fix listed CWE-120
TI-2018-02863 CVE-2018-3894 · GHSA-8ppx-64m7-wrpx

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01804 Published 2018-09-21 No fix listed CWE-120
TI-2018-02845 CVE-2018-3876 · GHSA-xr84-7wwf-c8rq

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01871 Published 2018-09-21 No fix listed CWE-120
TI-2018-02835 CVE-2018-3865 · GHSA-6hjr-885q-f58r

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01827 Published 2018-09-20 No fix listed CWE-120
TI-2018-02834 CVE-2018-3864 · GHSA-w75f-gw3f-7vf9

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01804 Published 2018-09-20 No fix listed CWE-120
Load more
Open these records in search →