CVE-2019-7420

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-03-21 · updated 2026-06-17
Weakness: CWE-79

Description

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.

Affected products

Samsung Syncthru Web Service: all versions
Samsung X7400Gx Firmware: 6.a6.25

References

http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2019/Feb/28
http://www.samsung.com/Support/ProductSupport/download/index.aspx
http://www.samsungprinter.com/
http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2019/Feb/28
http://www.samsung.com/Support/ProductSupport/download/index.aspx
http://www.samsungprinter.com/

Get alerted when CVE-2019-7420 or the next vulnerability affects your stack