CVE-2019-7419

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015

Description The issue exists in the "/sws/leftmenu.sws" endpoint, where multiple parameters are vulnerable: ruiFw id, ruiFw pid, ruiFw title. This allows for potential exploitation.

Recommendations For SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015, avoid using the parameters ruiFw id, ruiFw pid, ruiFw title in the "/sws/leftmenu.sws" endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.