CVE-2021-42913

The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required.

Affected products

Samsung Scx-6X55X

Samsung Syncthru Web Service

All versions

CVSS 3.1

7.5 HIGH

EPSS

1.8% (77th percentile)

Weakness

CWE-522

NVD status

Modified

Published

2021-12-20