| Title | 複数の Samsung Smart TV および Xpress の Soft Access Point 機能における重要な情報を取得される脆弱性 |
|---|---|
| Summary | 複数の Samsung Smart TV および Xpress の Soft Access Point (AP) 機能は、脆弱な WPA2 PSK キーを生成するため、重要な情報を取得される、または認証を回避される脆弱性が存在します。 |
| Possible impacts | リモートの攻撃者により、総当たり (brute-force) 攻撃を介して、重要な情報を取得される、または認証を回避される可能性があります。 |
| Solution | ベンダ情報および参考情報を参照して適切な対策を実施してください。 |
| Publication Date | Dec. 17, 2015, midnight |
| Registration Date | May 1, 2017, 5:43 p.m. |
| Last Update | May 1, 2017, 5:43 p.m. |
| CVSS3.0 : 緊急 | |
| Score | 9.8 |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CVSS2.0 : 警告 | |
| Score | 5 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| サムスン |
| Smart TV NT14U ファームウェア |
| Smart TV X10P ファームウェア |
| Smart TV X12 ファームウェア |
| Smart TV X14H ファームウェア |
| Smart TV X14J ファームウェア |
| Xpress series Printer M288OFW ファームウェア |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2017年05月01日] 掲載 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack. |
|---|---|
| Publication Date | March 24, 2017, 5:59 a.m. |
| Registration Date | Jan. 26, 2021, 2:53 p.m. |
| Last Update | Nov. 21, 2024, 11:33 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:nt14u_firmware:t-nt14uakucb-1008.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:nt14u_us:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x14j_us:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x14h_firmware:t-mst14dcncb-1010.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x14h_cn:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x12_firmware:t-mst12akucb-1114.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x12_us:-:*:*:*:*:*:*:* | ||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x10p_firmware:t-mst10pibrcb-1104.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x10p_ibr:-:*:*:*:*:*:*:* | ||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:nt14u_firmware:t-nt14udeucb-1007.1:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:nt14u_eu:-:*:*:*:*:*:*:* | ||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:nt14u_firmware:t-nt14udcncb-1003.1:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:nt14u_cn:-:*:*:*:*:*:*:* | ||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x14j_firmware:t-ms14jdeucb-1018.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x14j_eu:-:*:*:*:*:*:*:* | ||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x14j_firmware:t-ms14jdcncb-1004.2:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x14j_cn:-:*:*:*:*:*:*:* | ||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x14h_firmware:t-mst14akucb-1100.4:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x14h_us:-:*:*:*:*:*:*:* | ||||
| Configuration11 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x14h_firmware:t-mst14deucb-1023.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x14h_eu:-:*:*:*:*:*:*:* | ||||
| Configuration12 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x12_firmware:t-mst12deucb-1111.4:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x12_eu:-:*:*:*:*:*:*:* | ||||
| Configuration13 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x10p_firmware:t-mst10pauscp-1302.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x10p_us:-:*:*:*:*:*:*:* | ||||
| Configuration14 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:x10p_firmware:t-mst10pdeucb-1210.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:x10p_eu:-:*:*:*:*:*:*:* | ||||
| Configuration15 | or higher | or less | more than | less than | |
| cpe:2.3:o:samsung:m288ofw_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:samsung:m288ofw:-:*:*:*:*:*:*:* | ||||