CVEvulnerability
CVE-2015-5729
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-03-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.
Affected configurations
• samsung nt14u firmware t-nt14uakucb-1008.0
• samsung x14j firmware t-ms14jakucb-1102.5
• samsung x14h firmware t-mst14dcncb-1010.0
• samsung x12 firmware t-mst12akucb-1114.0
• samsung x10p firmware t-mst10pibrcb-1104.0
• samsung nt14u firmware t-nt14udeucb-1007.1
• samsung nt14u firmware t-nt14udcncb-1003.1
• samsung x14j firmware t-ms14jdeucb-1018.0
• samsung x14j firmware t-ms14jdcncb-1004.2
• samsung x14h firmware t-mst14akucb-1100.4
• samsung x14h firmware t-mst14deucb-1023.0
• samsung x12 firmware t-mst12deucb-1111.4
• samsung x10p firmware t-mst10pauscp-1302.0
• samsung x10p firmware t-mst10pdeucb-1210.0
• samsung m288ofw firmware
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html Exploit, Technical Description, Third Party Advisory
- http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2015/Dec/79 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/79675 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034503 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034504 Third Party Advisory, VDB Entry
- http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html Exploit, Technical Description, Third Party Advisory
- http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2015/Dec/79 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/79675 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034503 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034504 Third Party Advisory, VDB Entry