Samsung

Records2044All Threatist records

Exploited (KEV)16In CISA KEV

CVSS critical180CVSS 9.0–10.0

CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV

TI-2024-06858 Samsung MagicINFO 9 Server Path Traversal Vulnerability CRITICAL 100KEV 2026-04-24 TI-2025-15038 Samsung Mobile Devices Out-of-Bounds Write Vulnerability CRITICAL 100KEV 2025-11-10 TI-2025-15039 Samsung Mobile Devices Out-of-Bounds Write Vulnerability CRITICAL 100KEV 2025-10-02 TI-2025-04133 Samsung MagicINFO 9 Server Path Traversal Vulnerability CRITICAL 100KEV 2025-05-22 TI-2022-06595 Samsung Mobile Devices Use-After-Free Vulnerability CRITICAL 93KEV 2023-09-18 TI-2021-07610 Samsung Mobile Devices Unspecified Vulnerability CRITICAL 89KEV 2023-06-29

Components

Products in the NVD configurations · select one to filter the records

Android 502 records CRITICAL Exynos 1380 Firmware 125 records MEDIUM Exynos 1280 Firmware 118 records HIGH Exynos 980 Firmware 114 records HIGH Exynos 1330 Firmware 99 records MEDIUM Exynos 1080 Firmware 97 records HIGH Exynos 850 Firmware 97 records HIGH Exynos 1480 Firmware 90 records MEDIUM

Records

8 records in Syncthru Web Service · all components

TI-2018-10723 CVE-2018-14908 · GHSA-g6qr-h2w5-v6xc

Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as…

LOW 39

Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00512 Published 2018-08-03 No fix listed CWE-352

TI-2021-19041 CVE-2021-42913 · GHSA-4jp6-449x-6fgh

The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access…

LOW 37

The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01848 Published 2021-12-20 No fix listed CWE-522

TI-2021-14165 CVE-2021-35309 · GHSA-cg26-wmrp-ggr4

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers…

LOW 35

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00523 Published 2023-08-22 No fix listed CWE-269

TI-2019-05282 CVE-2019-7421 · GHSA-r3wq-v7xc-m5hr

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in…

LOW 30

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01537 Published 2019-03-17 No fix listed CWE-79

TI-2019-05281 CVE-2019-7420 · GHSA-v496-5688-5jwg

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in…

LOW 30

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01537 Published 2019-03-17 No fix listed CWE-79

TI-2019-05280 CVE-2019-7419 · GHSA-hmcj-3g4j-7m53

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in…

LOW 30

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01537 Published 2019-03-17 No fix listed CWE-79

TI-2019-05279 CVE-2019-7418 · GHSA-g733-45hp-g9gg

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in…

LOW 30

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0155 Published 2019-03-17 No fix listed CWE-79

TI-2018-10719 CVE-2018-14904 · GHSA-9x62-v8r8-3f3p

Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS…

LOW 28

Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00688 Published 2018-08-03 No fix listed CWE-79

Open these records in search →

Critical	180
High	708
Medium	1044
Low	112
No CVSS	0