Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving (1) direct access to a file or (2) the user-setup web page.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/882286 | US Government Resource |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2013-08-28 06:09
Updated : 2013-10-07 10:53
NVD link : CVE-2013-3585
Mitre link : CVE-2013-3585
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
samsung
- smart_viewer
- dvr