CVE-2017-16524 is an unrestricted file upload vulnerability in Web Viewer 1.0.0.193 on Samsung SRN-1670D devices, allowing authenticated attackers to upload and execute arbitrary PHP code. Authentication can be achieved by leveraging CVE-2015-8279 to obtain cleartext web-interface credentials. This vulnerability carries a CVSS score of 8.8 (High), indicating a critical risk with high impact on confidentiality, integrity, and availability, and is easily exploitable over the network with low complexity. While not on the KEV catalog or Hot List, exploit modules are publicly available in Metasploit and ExploitDB, suggesting a high potential for exploitation despite limited community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0.0.193CPE matchmatch criteria | cpe:2.3:a:hanwhasecurity:web_viewer:1.0.0.193:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.