Samsung HVAC DMS

Source: All CISA Advisories | Added:

The article details multiple vulnerabilities in Samsung's HVAC DMS software, which could allow unauthenticated remote code execution and unauthorized file access. These vulnerabilities include execution after redirect, deserialization of untrusted data, and various path traversal issues, posing significant risks to users.

Impact: Samsung HVAC DMS: Versions 2.0.0 to 2.3.13.0, Versions 2.5.0.17 to 2.6.14.0, Versions 2.7.0.15 to 2.9.3.5

In the Wild: Unknown

Age: Newly disclosed

Remediation: Contact a Samsung call center or installer for a software update; disconnect the product from the Internet.

Phishing CVE Vulnerability Update

Read Full Original Article →