Samsung » Ipolis Device Manager : Security Vulnerabilities, CVEs,
Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.
Max CVSS
6.8
EPSS Score
11.10%
Published
2015-02-24
Updated
2016-04-01
Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary code via a long value.
Max CVSS
9.3
EPSS Score
30.47%
Published
2014-06-05
Updated
2014-06-06
Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control.
Max CVSS
9.3
EPSS Score
9.90%
Published
2014-06-11
Updated
2014-06-12
3 vulnerabilities found