First published: Sun Mar 17 2019(Updated: )
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung SyncThru Web Service | ||
Samsung X7400gx Firmware | =6.a6.25 | |
SAMSUNG X7400GX | ||
All of | ||
Samsung X7400gx Firmware | =6.a6.25 | |
SAMSUNG X7400GX |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-7419 is a vulnerability that allows for cross-site scripting (XSS) attacks in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.
The affected software includes Samsung SyncThru Web Service version - and Samsung X7400GX Firmware version 6.a6.25.
CVE-2019-7419 has a severity level of medium with a CVSS score of 6.1.
To fix CVE-2019-7419, it is recommended to apply the patches and updates provided by Samsung. Additionally, it is important to sanitize user inputs to prevent cross-site scripting attacks.
You can find more information about CVE-2019-7419 on the following references: - [Packet Storm Security](http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html) - [Full Disclosure Mailing List](http://seclists.org/fulldisclosure/2019/Feb/28) - [Samsung Support](http://www.samsung.com/Support/ProductSupport/download/index.aspx)