CVE-2021-42913 | BDVDB-2026-166188 Detail

Description#

The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.samsungmobile.com/securityUpdate.smsb
https://medium.com/%40windsormoreira/samsung-printer-scx-6x55x-improper-access-control-cve-2021-42913-bd50837e5e9a

Exploit#

No public exploit known

History#

Version 12021-12-20Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.