CVE-2015-5729
Status: ModifiedCritical (9.8)—
The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.
CVSS
- Version: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Base score: 9.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 4.97%
- Percentile among all scored CVEs: 92
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (6)
CWEs
- CWE-200
References
- http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html
- http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html
- http://seclists.org/fulldisclosure/2015/Dec/79
- http://www.securityfocus.com/bid/79675
- http://www.securitytracker.com/id/1034503
- http://www.securitytracker.com/id/1034504
- http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html
- http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html
- http://seclists.org/fulldisclosure/2015/Dec/79
- http://www.securityfocus.com/bid/79675
- http://www.securitytracker.com/id/1034503
- http://www.securitytracker.com/id/1034504
Raw JSON (NVD)
Show
{
"id": "CVE-2015-5729",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2017-03-23T20:59:00.390",
"references": [
{
"url": "http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html",
"tags": [
"Exploit",
"Technical Description",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://seclists.org/fulldisclosure/2015/Dec/79",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/79675",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id/1034503",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id/1034504",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html",
"tags": [
"Exploit",
"Technical Description",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2015/Dec/79",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/79675",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1034503",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1034504",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack."
},
{
"lang": "es",
"value": "La característica Soft Access Point (AP) en Samsung Smart TV X10P, X12, X14H, X14J y NT14U e impresoras Xpress M288OFW genera claves WPA2 PSK débiles, lo que hace más fácil para atacantes remotos obtener información sensible o eludir la autenticación a través de un ataque de fuerza bruta."
}
],
"lastModified": "2026-06-17T00:29:40.017",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:nt14u_firmware:t-nt14uakucb-1008.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "323D8E86-D758-4B1A-8F48-7F34AD60C4EB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:nt14u_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E79C9FDC-8352-4DB2-8E7D-39C0F52165B1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A5867B4-EC19-45D4-87BE-867E1D41ECD5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14j_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6FDE7649-FFFF-4577-AFE2-B2A689E128FF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14h_firmware:t-mst14dcncb-1010.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F37E9EF9-52E0-4CB8-B33A-8A624EBEC0C3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14h_cn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "78A90629-6CC3-4765-A603-4D25A704710A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x12_firmware:t-mst12akucb-1114.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37061C66-CDF1-4AC2-8398-2E08E5A3CF7F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x12_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6099C402-C71B-4D3B-BDCD-B5C58DCEE8CB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x10p_firmware:t-mst10pibrcb-1104.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E438852D-E230-4586-B9AD-C979F8A8C2C5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x10p_ibr:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A8181FF8-7C8F-4E10-AD37-3ED2924587F6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:nt14u_firmware:t-nt14udeucb-1007.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E61113A9-117C-42DB-90BA-44B574BF9037"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:nt14u_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9C880508-E44C-48D9-B9A3-F8C4793DFE0D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:nt14u_firmware:t-nt14udcncb-1003.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4370F4FE-B9FE-4E20-AB98-DF9DB07DC113"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:nt14u_cn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "813189AB-7922-43C8-98EA-DC1E16F33D40"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14j_firmware:t-ms14jdeucb-1018.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "962C2455-18A5-458C-9FC1-C10497D3E01A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14j_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "83ACB60E-D178-46EE-B815-D2844CBF1B7E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14j_firmware:t-ms14jdcncb-1004.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00708C81-4B19-484F-A2B6-5EC2A86DBC03"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14j_cn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17D7C0A4-EDBE-4E41-ABF6-B330CA270446"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14h_firmware:t-mst14akucb-1100.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B87BF6CC-722B-4BCE-974F-7ECA2BDB9966"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14h_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "988F86CD-C309-49AE-AA5D-93B279DE1C3E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x14h_firmware:t-mst14deucb-1023.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55CA3DE7-BF5B-4B3D-B609-DB0BCF7D5657"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x14h_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7A03FF6A-9253-4DF9-9D40-074D6FF938DB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x12_firmware:t-mst12deucb-1111.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E908B27E-3185-494D-972E-FF01C952DA34"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x12_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E4D6792B-ACAC-4346-9BED-3CA81112B960"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x10p_firmware:t-mst10pauscp-1302.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25978430-E8E0-4FB7-96A2-41AED54DB157"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x10p_us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "72710637-8D8C-4112-91B4-7665F64DD2D3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:x10p_firmware:t-mst10pdeucb-1210.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E21AFBC-C6B2-445C-935C-28CB3D811E44"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:x10p_eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "369A7381-7F8E-49D6-99A2-3974BCAF30F5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:m288ofw_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F700FEA-2BA4-48EB-9A26-22668908B8F3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:m288ofw:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5C066454-325C-438D-B283-9BE5ECFC5088"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}