CVE-2012-4334 The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecif...
HighCVSS 10.0
EPSS 6.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samsung net-i viewer | = 1.37.120316 | No fix listed |
References
- 48965 third-party-advisory vendor-advisory
- 18765 exploit
- 53193 exploit vdb-entry
- netiware-activex-code-execution(75069) vdb-entry