CVE-2015-0555

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-02-24 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.

Affected products

Samsung Ipolis Device Manager: 1.12.2

References

http://packetstormsecurity.com/files/131421/Samsung-iPOLiS-1.12.2-ReadConfigValue-Remote-Code-Execution.html
http://seclists.org/fulldisclosure/2015/Feb/81
http://packetstormsecurity.com/files/131421/Samsung-iPOLiS-1.12.2-ReadConfigValue-Remote-Code-Execution.html
http://seclists.org/fulldisclosure/2015/Feb/81

Get alerted when CVE-2015-0555 or the next vulnerability affects your stack