CVE-2015-8279

Related Files

Samsung SRN-1670D Web Viewer 1.0.0.193 Arbitrary File Read / Upload

Posted Jan 11, 2018

Authored by Omar Mezrag, Algeria, Realistic Security | Site metasploit.com

This Metasploit module exploits an unrestricted file upload vulnerability in Web Viewer 1.0.0.193 on Samsung SRN-1670D devices. The network_ssl_upload.php file allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing local file read vulnerability referenced by CVE-2015-8279, which allows remote attackers to read the web interface credentials by sending a request to: cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI.

tags | exploit, remote, web, arbitrary, local, root, php, file upload

advisories | CVE-2015-8279, CVE-2017-16524

SHA-256 | 01dd3eafd05e3df998f5fcb41b54bc9db77b1c53fd0d923b9b36d3070206c261

Download | Favorite | View

Web Viewer 1.0.0.193 (Samsung SRN-1670D) File Upload

Posted Nov 13, 2017

Authored by Omar Mezrag | Site metasploit.com

Web Viewer version 1.0.0.193 on Samsung SRN-1670D suffers from an unrestricted file upload vulnerability.

tags | exploit, web, file upload

advisories | CVE-2015-8279, CVE-2017-16524

SHA-256 | 885ec7ceed2d053ced5d897f78056b1ccabe528cc26c52c64e50782a1b9d9921

Download | Favorite | View