Login Request a demo
SW
Product
Syncthru Web Service
by Samsung · last CVE Aug 22, 2023
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 3Medium 5Low 0
Severity
All severities8Critical0High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Syncthru Web Service to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-14908
8.8
1%
Aug 3
Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails…
Affected: 4.05.61
CVE-2021-35309
7.5
1%
Aug 22
An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks
Affected: 5.93
CVE-2021-42913
7.5
2%
Dec 20
The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code
Affected: All versions, or not specified
CVE-2019-7421
6.1
2%
Mar 17
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL
Affected: All versions, or not specified
CVE-2019-7420
6.1
2%
Mar 17
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter
Affected: All versions, or not specified
CVE-2019-7419
6.1
2%
Mar 17
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title
Affected: All versions, or not specified
CVE-2019-7418
6.1
2%
Mar 17
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc
Affected: All versions, or not specified
CVE-2018-14904
6.1
1%
Aug 3
Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid
Affected: 4.05.61
Showing 8