CVE-2015-5473
CriticalSummary
Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files or execute arbitrary code with SYSTEM privileges.
Risk Assessment
Attackers can exploit these vulnerabilities to gain full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Samsung SyncThru to the latest version to mitigate these vulnerabilities and to monitor the system for potential attack attempts.
Original NVD description (English source)
Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to (1) upload/updateDriver or (2) upload/addDriver or to execute arbitrary code with SYSTEM privileges via unspecified parameters to (3) uploadCloning.html, (4) fileupload.html, (5) uploadFirmware.html, or (6) upload/driver.