[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5XfnmprHis_u7nbPv2I7W91pJytqWfZLE1GYw1S-5GU":3,"g5a-risk:CVE-2017-16524":134},{"success":4,"data":5,"meta":132},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":72,"weaknesses":73,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":15,"otxData":15,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":123,"notableEvents":124},"CVE-2017-16524","What is CVE-2017-16524?","Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload\u002F directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=\u002Froot\u002Fphp_modules\u002Flighttpd\u002Fsbin\u002Fuserpw URI.","Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticate...","2017-11-06T08:29:00.22","2025-04-20T01:37:25.86",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.30296,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"hanwhasecurity","web_viewer","1.0.0.193","cpe:2.3:a:hanwhasecurity:web_viewer:1.0.0.193:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"samsung","srn-1670d","-","cpe:2.3:h:samsung:srn-1670d:-:*:*:*:*:*:*:*",2,[56,63,68,70],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fgithub.com\u002Frealistic-security\u002FCVE-2017-16524","GitHub",[60,61,62],"Exploit","Issue Tracking","Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F43138\u002F","Exploit-db",[60,61,62,67],"VDB Entry",{"url":57,"source":58,"tags":69},[60,61,62],{"url":64,"source":65,"tags":71},[60,61,62,67],4,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",1,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2017-16524? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2017-16524, a high severity cyber security vulnerability from 2017. High exploit probability (30.3%). Web Viewer 1.0.0.193 on S...","CVE-2017-16524, CVE-2017-16524 vulnerability, CVE-2017-16524 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, hanwhasecurity security, samsung security, web_viewer vulnerability, srn-1670d vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2017-16524",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2017-16524","Cybersecurity","CVE-2017-16524, CVE-2017-16524 vulnerability, CVE-2017-16524 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":112,"Negate":15,"Nodes":113},"AND",[114,119],{"Operator":115,"Negate":15,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":118,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6F3219C8-6C69-4B8F-92EB-B83C37C0D36C",{"Operator":115,"Negate":15,"CPEMatch":120},[121],{"Vulnerable":15,"Criteria":53,"MatchCriteriaID":122,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6911846A-7E2D-46CF-BDD3-E5502308136B",[],[125],{"id":126,"eventType":127,"eventTime":128,"details":129,"label":130,"color":131},"556d16cb-5a04-4281-b70b-2d96888276bb","LOW_EPSS_DELTA","2026-06-16T04:06:24.640005+00:00","Daily EPSS score decreased by 0.444 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":133,"version":32},1793215130350,{"score":135,"band":136,"action":137,"scoredAt":138},52,"Medium","Plan remediation","2026-10-28T06:42:49.509668+00:00"]