CVE-2013-3586: Samsung Dvr

High severity, CVSS 7.6. EPSS: 11.2% chance of exploitation in the next 30 days.

Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.

Affected products

• Samsung Dvr
• Samsung Smart Viewer: affected versions not specified

Published 2013-08-28. Last modified 2026-06-16.