CVE-2008-4380

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-10-01 · updated 2026-06-16
Weakness: CWE-20

Description

The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" characters.

Affected products

Samsung Dvr Shr2040: b3.03e-k1.53-v2.19_0705281908

References

http://secunia.com/advisories/31752
http://securityreason.com/securityalert/4329
http://www.securityfocus.com/bid/31047
http://www.sybsecurity.com/advisors/SYBSEC-ADV16-Samsung_DVR_SHR_2040_HTTPD_Remote_Denial_Of_Service
https://exchange.xforce.ibmcloud.com/vulnerabilities/44995
https://www.exploit-db.com/exploits/6394
http://secunia.com/advisories/31752
http://securityreason.com/securityalert/4329
http://www.securityfocus.com/bid/31047
http://www.sybsecurity.com/advisors/SYBSEC-ADV16-Samsung_DVR_SHR_2040_HTTPD_Remote_Denial_Of_Service
https://exchange.xforce.ibmcloud.com/vulnerabilities/44995
https://www.exploit-db.com/exploits/6394

Get alerted when CVE-2008-4380 or the next vulnerability affects your stack