CVE-2015-5473

CRÍTICO 9.8CVE-2015-5473 · Published 01/06/2017 · updated 17/06/2026

En resumen

CVE-2015-5473 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a syncthru 6 (samsung).
Probabilidad de explotación en los próximos 30 días (EPSS): 12.6%, mayor que el 96.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
syncthru 6 samsung	`≤ -`	No fix yet

Description

Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to (1) upload/updateDriver or (2) upload/addDriver or to execute arbitrary code with SYSTEM privileges via unspecified parameters to (3) uploadCloning.html, (4) fileupload.html, (5) uploadFirmware.html, or (6) upload/driver.

References

securityfocus.com/bid/75912 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-296 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-297 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-298 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-299 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-300 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-301 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free