PT-2021-23697 · Samsung · Samsung Scx-6X55X

Published 2021-12-20 · Updated 2023-08-08 · CVE-2021-42913

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung SCX-6x55X printers (affected versions not specified)

Description The issue allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code of the SyncThru Web Service. Authentication is not required to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2021-42913

Affected Products

Samsung Scx-6X55X

References · 6

• 🔥 https://medium.com/@windsormoreira/samsung-printer-scx-6x55x-improper-access-control-cve-2021-42913-bd50837e5e9a · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-42913 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://medium.com/%40windsormoreira/samsung-printer-scx-6x55x-improper-access-control-cve-2021-42913-bd50837e5e9a · Note
• https://t.me/cvenotify/24668 · Telegram Post
• https://t.me/cvenotify/24633 · Telegram Post