CVE-2008-4380

Published: Oct 1, 2008Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" characters.

Affected (1)

Products: Samsung: Dvr Shr2040

Samsung

1 product

Dvr Shr2040

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Samsung Dvr Shr2040	Version b3.03e-k1.53-v2.19_0705281908

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://secunia.com/advisories/31752

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4329

Source: cve@mitre.org

http://www.securityfocus.com/bid/31047

Source: cve@mitre.org

Exploit

http://www.sybsecurity.com/advisors/SYBSEC-ADV16-Samsung_DVR_SHR_2040_HTTPD_Remote_Denial_Of_Service

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44995

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6394

Source: cve@mitre.org

http://secunia.com/advisories/31752