CVE-2021-42913: Samsung Syncthru Web Service

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required.

Affected products

• Samsung Syncthru Web Service: affected versions not specified

Published 2021-12-20. Last modified 2026-06-17.