CVE-2015-3435

High

Published: 01/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request.

Risk Assessment

This vulnerability may lead to remote code execution, posing a significant security threat to systems using SSM.

Recommendation

It is recommended to update Samsung Security Manager to version 1.31 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Samsung Security Manager (SSM)

CVE-2015-1499High
The ActiveMQ Broker in Samsung Security Manager (SSM) before version 1.31 allows remote attackers to delete arbitrary files, potentially leading to a denial of service.

Original NVD description (English source)

Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request.