CVE-2017-14262

—

CVSS 3.0

8.1 high

EPSS

4%p91

Published

Sep 11, 2017 (Sep 11, 2017)

Modified

Jun 17, 2026

Description

On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUserPasswd parameter.

Vendors: samsung
Products: srn 1670d firmware, srn 1000 firmware, srn 472s firmware, srn 470d firmware
Weakness: CWE-326
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.4%)

In the news0 stories

No ingested article mentions this CVE yet.