CVE-2021-35309 Privilege escalation in n/a

What is CVE-2021-35309?

CVE-2021-35309 is a high-severity vulnerability in n/a, published on 22 Aug 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks.

Weakness: CWE-269

Which versions are affected by CVE-2021-35309?

It affects 1 product.

Products include Samsung Syncthru Web Service.

How do I fix CVE-2021-35309?

No fix has been published for CVE-2021-35309 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-35309 being exploited?

There is no known exploitation of CVE-2021-35309 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-14908 Cross-site request forgery in n/a High 8.8
• CVE-2021-42913 Information disclosure in n/a High 7.5
• CVE-2019-7418 Cross-site scripting in n/a Medium 6.1
• CVE-2019-7419 Cross-site scripting in n/a Medium 6.1
• CVE-2019-7420 Cross-site scripting in n/a Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cg26-wmrp-ggr4.