CVE-2019-20451

CRITICAL 9.8CVE-2019-20451 · Published 10/02/2020 · updated 17/06/2026

In short

CVE-2019-20451 is a CRITICAL (CVSS 9.8) vulnerability affecting prismview player 11 (samsung), prismview system 9 (samsung).
Chance of exploitation in the next 30 days (EPSS): 7.7%, higher than 94.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
prismview player 11 samsung	`= 13.09.1100`	No fix yet
prismview system 9 samsung	`= 11.10.17.00`	No fix yet

Description

The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploading RebootSystem.lnk and requesting /REBOOTSYSTEM or /RESTARTVNC. (Authentication is required but an XML file containing credentials can be downloaded.)

References

exploit-db.com/papers/47535 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free