CVE-2015-3435 - Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request

Back Back to CVE browser

HIGH

Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request

Published May 1, 2015

10.0

HIGH

CVSS 2.0

EPSS 10.24%

Description

Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (4)

http://www.securityfocus.com/bid/74400
vdb-entryx_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-15-156/
x_refsource_MISC
http://www.zerodayinitiative.com/advisories/ZDI-15-157/
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3479
Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/74400		vdb-entryx_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-15-156/		x_refsource_MISC
http://www.zerodayinitiative.com/advisories/ZDI-15-157/		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3479		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 1, 2015

Updated Aug 6, 2024

Reserved Apr 27, 2015

Link CVE-2015-3435

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-3435

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 1, 2015

Updated Aug 6, 2024

Link EUVD-2015-3479

GitHub

No data