CRITICAL🇵🇱 Wersja polska

CVE-2015-5729

CVSS 9.8v3.0pub. 2017-03-23upd. 2026-05-13

The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Samsung M288ofw

    HW
    Samsung
    all versions

  • Samsung M288ofw Firmware

    OS
    Samsung
    all versions

  • Samsung Nt14u Cn

    HW
    Samsung
    all versions

  • Samsung Nt14u Eu

    HW
    Samsung
    all versions

  • Samsung Nt14u Firmware

    OS
    Samsung
    t-nt14uakucb-1008.0t-nt14udcncb-1003.1t-nt14udeucb-1007.1

  • Samsung Nt14u Us

    HW
    Samsung
    all versions

  • Samsung X10p Eu

    HW
    Samsung
    all versions

  • Samsung X10p Firmware

    OS
    Samsung
    t-mst10pauscp-1302.0t-mst10pdeucb-1210.0t-mst10pibrcb-1104.0

  • Samsung X10p Ibr

    HW
    Samsung
    all versions

  • Samsung X10p Us

    HW
    Samsung
    all versions

  • Samsung X12 Eu

    HW
    Samsung
    all versions

  • Samsung X12 Firmware

    OS
    Samsung
    t-mst12akucb-1114.0t-mst12deucb-1111.4

  • Samsung X12 Us

    HW
    Samsung
    all versions

  • Samsung X14h Cn

    HW
    Samsung
    all versions

  • Samsung X14h Eu

    HW
    Samsung
    all versions

  • Samsung X14h Firmware

    OS
    Samsung
    t-mst14akucb-1100.4t-mst14dcncb-1010.0t-mst14deucb-1023.0

  • Samsung X14h Us

    HW
    Samsung
    all versions

  • Samsung X14j Cn

    HW
    Samsung
    all versions

  • Samsung X14j Eu

    HW
    Samsung
    all versions

  • Samsung X14j Firmware

    OS
    Samsung
    t-ms14jakucb-1102.5t-ms14jdcncb-1004.2t-ms14jdeucb-1018.0

  • Samsung X14j Us

    HW
    Samsung
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2016-0729CRITICAL9.8PL ✓same product

Buffer overflow w Apache Xerces-C — RCE przez spreparowany dokument XML

CVE-2016-1329CRITICAL9.8PL ✓same product

Cisco NX-OS: Hardcoded credentials umożliwiające zdalny dostęp root

CVE-2016-1010HIGH8.8⚠ KEVsame product

Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows an...

CVE-2016-1348HIGH7.5same product

Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (d...

CVE-2016-1349HIGH7.5same product

The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows re...