Samsung x7400gx Firmware vulnerabilities

4 CVEs affecting Samsung x7400gx Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-7421, published 2019-03-21.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-7418, published 2019-03-21. Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days. XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc.
• CVE-2019-7421, published 2019-03-21. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.
• CVE-2019-7420, published 2019-03-21. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.
• CVE-2019-7419, published 2019-03-21. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.