CVE-2019-7420: Samsung Syncthru Web Service

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.

Affected products

• Samsung Syncthru Web Service: affected versions not specified
• Samsung x7400gx Firmware: version 6.a6.25 only

Published 2019-03-21. Last modified 2026-06-17.