Vulnerabilidades em Samsung

56 resultados
Análise Vexday

Com 56 CVEs catalogadas, o perfil Samsung apresenta taxa de exploração ativa abaixo da média geral do catálogo — nenhuma entrada confirmada no CISA KEV —, o que sugere pressão operacional imediata relativamente contida. Ainda assim, 24 vulnerabilidades de severidade crítica representam uma superfície de ataque expressiva que exige atenção contínua de equipes de patch management. A falha mais prevalente é CWE-20 (validação inadequada de entrada), padrão que tende a viabilizar explorações encadeadas quando não corrigido sistematicamente. O maior EPSS observado (0,0593) pertence a CVE-2019-6742, indicando probabilidade de exploração ainda moderada para essa CVE específica; a existência de uma PoC pública no conjunto reforça a necessidade de priorizar a remediação das entradas críticas mesmo na ausência de exploração ativa confirmada.

CVE-2019-6742CRITICALThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to 1.4.20.2. AutEPSS 5.9%CVE-2020-8899CRITICALMemory corruption in Quram library when decoding qmg can lead to RCEEPSS 5.7%CVE-2018-3856CRITICALAn exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.EPSS 3.4%CVE-2019-6740CRITICALThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 EPSS 3.3%CVE-2019-6741MEDIUMThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 EPSS 3.2%CVE-2021-42114CRITICALScalable Rowhammering In the Frequency Domain to Bypass TRR Mitigations On Modern DDR4/LPDDR4X DevicesEPSS 2.9%CVE-2018-14318—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User inEPSS 2.5%CVE-2018-10496—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in versioEPSS 2.5%CVE-2018-3867CRITICALAn exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of EPSS 2.0%CVE-2018-3876CRITICALAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETEPSS 1.9%CVE-2018-3865CRITICALAn exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub SEPSS 1.8%CVE-2018-3894CRITICALAn exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings HuEPSS 1.8%CVE-2018-3864CRITICALAn exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub SEPSS 1.8%CVE-2018-3895CRITICALAn exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings HuEPSS 1.8%CVE-2018-3873CRITICALAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETEPSS 1.8%CVE-2018-3877CRITICALAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETEPSS 1.8%CVE-2018-3874CRITICALAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETEPSS 1.8%CVE-2018-3902CRITICALAn exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsung SmartThings Hub SEPSS 1.8%CVE-2018-3872CRITICALAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETEPSS 1.8%CVE-2018-3904CRITICALAn exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsung SmartThings Hub STEPSS 1.8%