CVE-2015-5729
Estado: ModificadaCrítica (9.8)—
The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.97%
- Percentil entre todas las CVEs puntuadas: 92
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (6)
CWE
- CWE-200
Referencias
- http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html
- http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html
- http://seclists.org/fulldisclosure/2015/Dec/79
- http://www.securityfocus.com/bid/79675
- http://www.securitytracker.com/id/1034503
- http://www.securitytracker.com/id/1034504
- http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html
- http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html
- http://seclists.org/fulldisclosure/2015/Dec/79
- http://www.securityfocus.com/bid/79675
- http://www.securitytracker.com/id/1034503
- http://www.securitytracker.com/id/1034504
JSON original (NVD)
Mostrar
{
"id": "CVE-2015-5729",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2017-03-23T20:59:00.390",
"references": [
{
"url": "http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html",
"tags": [
"Exploit",
"Technical Description",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://seclists.org/fulldisclosure/2015/Dec/79",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/79675",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id/1034503",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id/1034504",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html",
"tags": [
"Exploit",
"Technical Description",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2015/Dec/79",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/79675",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1034503",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1034504",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack."
},
{
"lang": "es",
"value": "La característica Soft Access Point (AP) en Samsung Smart TV X10P, X12, X14H, X14J y NT14U e impresoras Xpress M288OFW genera claves WPA2 PSK débiles, lo que hace más fácil para atacantes remotos obtener información sensible o eludir la autenticación a través de un ataque de fuerza bruta."
}
],
"lastModified": "2026-06-17T00:29:40.017",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:nt14u_firmware:t-nt14uakucb-1008.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "323D8E86-D758-4B1A-8F48-7F34AD60C4EB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:nt14u_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E79C9FDC-8352-4DB2-8E7D-39C0F52165B1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A5867B4-EC19-45D4-87BE-867E1D41ECD5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14j_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6FDE7649-FFFF-4577-AFE2-B2A689E128FF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14h_firmware:t-mst14dcncb-1010.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F37E9EF9-52E0-4CB8-B33A-8A624EBEC0C3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14h_cn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "78A90629-6CC3-4765-A603-4D25A704710A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x12_firmware:t-mst12akucb-1114.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37061C66-CDF1-4AC2-8398-2E08E5A3CF7F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x12_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6099C402-C71B-4D3B-BDCD-B5C58DCEE8CB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x10p_firmware:t-mst10pibrcb-1104.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E438852D-E230-4586-B9AD-C979F8A8C2C5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x10p_ibr:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A8181FF8-7C8F-4E10-AD37-3ED2924587F6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:nt14u_firmware:t-nt14udeucb-1007.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E61113A9-117C-42DB-90BA-44B574BF9037"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:nt14u_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9C880508-E44C-48D9-B9A3-F8C4793DFE0D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:nt14u_firmware:t-nt14udcncb-1003.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4370F4FE-B9FE-4E20-AB98-DF9DB07DC113"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:nt14u_cn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "813189AB-7922-43C8-98EA-DC1E16F33D40"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14j_firmware:t-ms14jdeucb-1018.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "962C2455-18A5-458C-9FC1-C10497D3E01A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14j_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "83ACB60E-D178-46EE-B815-D2844CBF1B7E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14j_firmware:t-ms14jdcncb-1004.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00708C81-4B19-484F-A2B6-5EC2A86DBC03"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14j_cn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17D7C0A4-EDBE-4E41-ABF6-B330CA270446"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14h_firmware:t-mst14akucb-1100.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B87BF6CC-722B-4BCE-974F-7ECA2BDB9966"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14h_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "988F86CD-C309-49AE-AA5D-93B279DE1C3E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14h_firmware:t-mst14deucb-1023.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55CA3DE7-BF5B-4B3D-B609-DB0BCF7D5657"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14h_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7A03FF6A-9253-4DF9-9D40-074D6FF938DB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x12_firmware:t-mst12deucb-1111.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E908B27E-3185-494D-972E-FF01C952DA34"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x12_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E4D6792B-ACAC-4346-9BED-3CA81112B960"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x10p_firmware:t-mst10pauscp-1302.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25978430-E8E0-4FB7-96A2-41AED54DB157"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x10p_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "72710637-8D8C-4112-91B4-7665F64DD2D3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x10p_firmware:t-mst10pdeucb-1210.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E21AFBC-C6B2-445C-935C-28CB3D811E44"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x10p_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "369A7381-7F8E-49D6-99A2-3974BCAF30F5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:m288ofw_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F700FEA-2BA4-48EB-9A26-22668908B8F3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:m288ofw:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5C066454-325C-438D-B283-9BE5ECFC5088"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}