CVE-2015-5473

CRITICO 9.8CVE-2015-5473 · Published 01/06/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
syncthru 6 samsung	`≤ -`	No fix yet

Description

Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to (1) upload/updateDriver or (2) upload/addDriver or to execute arbitrary code with SYSTEM privileges via unspecified parameters to (3) uploadCloning.html, (4) fileupload.html, (5) uploadFirmware.html, or (6) upload/driver.

References

securityfocus.com/bid/75912 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-296 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-297 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-298 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-299 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-300 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-301 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free