Vulnerability Details CVE-2019-7421
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.7%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Feb/28
- http://www.samsung.com/Support/ProductSupport/download/index.aspx
- http://www.samsungprinter.com/
- http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Feb/28
- http://www.samsung.com/Support/ProductSupport/download/index.aspx
- http://www.samsungprinter.com/
Products affected by CVE-2019-7421
-
cpe:2.3:a:samsung:syncthru_web_service:-
-
cpe:2.3:h:samsung:x7400gx:-
-
cpe:2.3:o:samsung:x7400gx_firmware:6.a6.25