Samsung Ipolis Device Manager vulnerabilities

3 CVEs affecting Samsung Ipolis Device Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0555, published 2015-02-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0555, published 2015-02-24. Medium severity, CVSS 6.8. EPSS: 6.4% chance of exploitation in the next 30 days. Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to…
CVE-2014-3911, published 2014-06-11. High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days. Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4)…
CVE-2014-3912, published 2014-06-05. High severity, CVSS 9.3. EPSS: 4.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote…