CVE-2014-3911: Code Injection

Q: What is the severity of CVE-2014-3911?

CVE-2014-3911 has a medium severity rating due to its potential for remote code execution.

Q: How do I fix CVE-2014-3911?

To fix CVE-2014-3911, upgrade to Samsung iPOLiS Device Manager version 1.8.7 or later.

Q: What versions are affected by CVE-2014-3911?

CVE-2014-3911 affects all versions of Samsung iPOLiS Device Manager prior to 1.8.7.

Q: Can CVE-2014-3911 be exploited remotely?

Yes, CVE-2014-3911 allows remote attackers to execute arbitrary code, making it exploitable over the network.

Q: What components of Samsung iPOLiS Device Manager are impacted by CVE-2014-3911?

CVE-2014-3911 impacts the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control among other methods.

Published Jun 11, 2014

Updated

Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control.

Affected Software

1 affected component

Samsung iPOLiS Device Manager<=1.8.2

Remediation

Patch Available

http://update.websamsung.net/Tools/iPOLiS%20Device%20Manager/iPOLiS%20Device%20Manager_v1.8.7_setup_Full.zip

Event History

Jun 11, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:55 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-3911?

CVE-2014-3911 has a medium severity rating due to its potential for remote code execution.

How do I fix CVE-2014-3911?