Sign-up

ID

VAR-201601-0417


CVE

CVE-2015-8279


TITLE

Samsung SRN-1670D camera contains multiple vulnerabilities

Trust: 0.8

sources: CERT/CC: VU#913000

DESCRIPTION

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script. The Samsung SRN-1670D camera contains multiple vulnerabilities. SamsungSRN-1670D is a network video recorder product from Samsung. An arbitrary file-read vulnerability 2. An information-disclosure vulnerability 3

Trust: 3.24

sources: NVD: CVE-2015-8279 // CERT/CC: VU#913000 // JVNDB: JVNDB-2015-006814 // CNVD: CNVD-2016-00247 // BID: 80381 // VULMON: CVE-2015-8279

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2016-00247

AFFECTED PRODUCTS

vendor:samsungmodel:web viewerscope:lteversion:1.0.0.193

Trust: 1.0

vendor:hanwhamodel: - scope: - version: -

Trust: 0.8

vendor:samsungmodel:web viewerscope:eqversion:0

Trust: 0.8

vendor:samsungmodel:web viewerscope:eqversion:date created 2013.10.26

Trust: 0.8

vendor:samsungmodel:web viewerscope:eqversion:version 1

Trust: 0.8

vendor:samsungmodel:web viewerscope:eqversion:193

Trust: 0.8

vendor:samsungmodel:srn-1670dscope: - version: -

Trust: 0.6

vendor:samsungmodel:web viewerscope:eqversion:1.0.0.193

Trust: 0.6

vendor:samsungmodel:srn-1670dscope:eqversion:1.0.0.193

Trust: 0.3

sources: CERT/CC: VU#913000 // CNVD: CNVD-2016-00247 // BID: 80381 // JVNDB: JVNDB-2015-006814 // CNNVD: CNNVD-201601-231 // NVD: CVE-2015-8279

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-8279
value: HIGH

Trust: 1.0

NVD: CVE-2015-8279
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2016-00247
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201601-231
value: MEDIUM

Trust: 0.6

VULMON: CVE-2015-8279
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2015-8279
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

CNVD: CNVD-2016-00247
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2015-8279
baseSeverity: HIGH
baseScore: 8.6
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 4.0
version: 3.0

Trust: 1.0

sources: CNVD: CNVD-2016-00247 // VULMON: CVE-2015-8279 // JVNDB: JVNDB-2015-006814 // CNNVD: CNNVD-201601-231 // NVD: CVE-2015-8279

PROBLEMTYPE DATA

problemtype:CWE-264

Trust: 1.8

sources: JVNDB: JVNDB-2015-006814 // NVD: CVE-2015-8279

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201601-231

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201601-231

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2015-006814

PATCH
title:SRN-1670Durl:http://www.samsungsecurity.com/product/product_view.asp?idx=6583
Trust: 0.8
title:CVE-2017-16524url:https://github.com/realistic-security/CVE-2017-16524 
Trust: 0.1
sources:
            
            
            VULMON: CVE-2015-8279 // 
            
            
            
            JVNDB: JVNDB-2015-006814

EXTERNAL IDS
db:CERT/CCid:VU#913000
Trust: 4.2
db:NVDid:CVE-2015-8279
Trust: 3.4
db:JVNid:JVNVU97593732
Trust: 0.8
db:JVNDBid:JVNDB-2015-006814
Trust: 0.8
db:CNVDid:CNVD-2016-00247
Trust: 0.6
db:CNNVDid:CNNVD-201601-231
Trust: 0.6
db:BIDid:80381
Trust: 0.3
db:VULMONid:CVE-2015-8279
Trust: 0.1
sources:
            
            
            CERT/CC: VU#913000 // 
            
            
            
            CNVD: CNVD-2016-00247 // 
            
            
            
            VULMON: CVE-2015-8279 // 
            
            
            
            BID: 80381 // 
            
            
            
            JVNDB: JVNDB-2015-006814 // 
            
            
            
            CNNVD: CNNVD-201601-231 // 
            
            
            
            NVD: CVE-2015-8279

REFERENCES
url:https://www.kb.cert.org/vuls/id/913000
Trust: 3.5
url:http://blog.emaze.net/2016/01/multiple-vulnerabilities-samsung-srn.html
Trust: 1.4
url:about vulnerability notes
Trust: 0.8
url:contact us about this vulnerability
Trust: 0.8
url:provide a vendor statement
Trust: 0.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-8279
Trust: 0.8
url:http://jvn.jp/vu/jvnvu97593732/index.html
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-8279
Trust: 0.8
url:http://www.samsung.com/
Trust: 0.3
url:https://cwe.mitre.org/data/definitions/264.html
Trust: 0.1
url:https://github.com/realistic-security/cve-2017-16524
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            CERT/CC: VU#913000 // 
            
            
            
            CNVD: CNVD-2016-00247 // 
            
            
            
            VULMON: CVE-2015-8279 // 
            
            
            
            BID: 80381 // 
            
            
            
            JVNDB: JVNDB-2015-006814 // 
            
            
            
            CNNVD: CNNVD-201601-231 // 
            
            
            
            NVD: CVE-2015-8279

CREDITS
Aristide Fattori, Luca Giancane and Roberto Paleari
Trust: 0.3
sources:
            
            
            BID: 80381

SOURCES
db:CERT/CCid:VU#913000
db:CNVDid:CNVD-2016-00247
db:VULMONid:CVE-2015-8279
db:BIDid:80381
db:JVNDBid:JVNDB-2015-006814
db:CNNVDid:CNNVD-201601-231
db:NVDid:CVE-2015-8279

LAST UPDATE DATE
2025-04-12T23:14:16.110000+00:00

SOURCES UPDATE DATE
db:CERT/CCid:VU#913000date:2016-01-25T00:00:00
db:CNVDid:CNVD-2016-00247date:2016-01-18T00:00:00
db:VULMONid:CVE-2015-8279date:2016-01-20T00:00:00
db:BIDid:80381date:2016-01-12T00:00:00
db:JVNDBid:JVNDB-2015-006814date:2016-01-22T00:00:00
db:CNNVDid:CNNVD-201601-231date:2016-01-18T00:00:00
db:NVDid:CVE-2015-8279date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:CERT/CCid:VU#913000date:2016-01-12T00:00:00
db:CNVDid:CNVD-2016-00247date:2016-01-18T00:00:00
db:VULMONid:CVE-2015-8279date:2016-01-15T00:00:00
db:BIDid:80381date:2016-01-12T00:00:00
db:JVNDBid:JVNDB-2015-006814date:2016-01-22T00:00:00
db:CNNVDid:CNNVD-201601-231date:2016-01-14T00:00:00
db:NVDid:CVE-2015-8279date:2016-01-15T03:59:10.763