What is the severity of CVE-2017-14262?

CVE-2017-14262 is considered a critical vulnerability due to its potential for remote exploitation.

How do I fix CVE-2017-14262?

To fix CVE-2017-14262, update the affected Samsung NVR device firmware to the latest version provided by Samsung.

Who is affected by CVE-2017-14262?

CVE-2017-14262 affects specific Samsung NVR models, including the SRN 1000, SRN 1670D, SRN 470D, and SRN 472S.

What can attackers do with CVE-2017-14262?

Attackers exploiting CVE-2017-14262 can gain unauthorized access to the device using the MD5 password hash of the 'admin' account.

Is CVE-2017-14262 being actively exploited?

There have been reports indicating that CVE-2017-14262 could be actively targeted by attackers wishing to compromise vulnerable NVR devices.

Vulnerability/
CVE-2017-14262

critical

9.3

CWE

326

11/9/2017

5/8/2024

CVE-2017-14262: Weak Encryption

First published: Mon Sep 11 2017(Updated: )

On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUserPasswd parameter.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Samsung Srn 1670d Firmware
Samsung Srn 1670d
Samsung Srn 1000 Firmware
Samsung Srn 1000
Samsung Srn 472s Firmware
Samsung Srn 472s
Samsung Srn 470d Firmware
Samsung Srn 470d

Never miss a vulnerability like this again

Reference Links

https://github.com/zzz66686/Samsung_NVR_vul

Frequently Asked Questions

What is the severity of CVE-2017-14262?
CVE-2017-14262 is considered a critical vulnerability due to its potential for remote exploitation.
How do I fix CVE-2017-14262?
To fix CVE-2017-14262, update the affected Samsung NVR device firmware to the latest version provided by Samsung.
Who is affected by CVE-2017-14262?
CVE-2017-14262 affects specific Samsung NVR models, including the SRN 1000, SRN 1670D, SRN 470D, and SRN 472S.
What can attackers do with CVE-2017-14262?
Attackers exploiting CVE-2017-14262 can gain unauthorized access to the device using the MD5 password hash of the 'admin' account.
Is CVE-2017-14262 being actively exploited?
There have been reports indicating that CVE-2017-14262 could be actively targeted by attackers wishing to compromise vulnerable NVR devices.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/weakness
agent/last-modified-date
agent/references
agent/author
agent/description
agent/first-publish-date
agent/event
agent/tags
agent/source
vendor/samsung
canonical/samsung srn 1670d firmware
canonical/samsung srn 1670d
canonical/samsung srn 1000 firmware
canonical/samsung srn 1000
canonical/samsung srn 472s firmware
canonical/samsung srn 472s
canonical/samsung srn 470d firmware
canonical/samsung srn 470d

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2017-14262?
CVE-2017-14262 is considered a critical vulnerability due to its potential for remote exploitation.
How do I fix CVE-2017-14262?
To fix CVE-2017-14262, update the affected Samsung NVR device firmware to the latest version provided by Samsung.
Who is affected by CVE-2017-14262?
CVE-2017-14262 affects specific Samsung NVR models, including the SRN 1000, SRN 1670D, SRN 470D, and SRN 472S.
What can attackers do with CVE-2017-14262?
Attackers exploiting CVE-2017-14262 can gain unauthorized access to the device using the MD5 password hash of the 'admin' account.
Is CVE-2017-14262 being actively exploited?
There have been reports indicating that CVE-2017-14262 could be actively targeted by attackers wishing to compromise vulnerable NVR devices.