{"id":"CVE-2015-5729","aliases":["EUVD-2015-5675","GHSA-q9vm-xr73-4r75"],"status":"published","title":"The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and...","description":"The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04973,"percentile":0.92256,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-03-23T20:00:00Z","modified":"2026-06-17T00:29:40Z","products":[{"vendor":"samsung","product":"m288ofw_firmware"},{"vendor":"samsung","product":"nt14u_firmware"},{"vendor":"samsung","product":"x10p_firmware"},{"vendor":"samsung","product":"x12_firmware"},{"vendor":"samsung","product":"x14h_firmware"},{"vendor":"samsung","product":"x14j_firmware"}],"references":[{"url":"http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034503","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/79675","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/79","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034504","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5729"},{"url":"https://github.com/advisories/GHSA-q9vm-xr73-4r75"}],"sources":{"cve":[{"id":"CVE-2015-5729","description":"The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.","status":"published","published":"2017-03-23T20:00:00Z","modified":"2024-08-06T06:59:04.053Z","updated_at":"2026-11-02T14:35:39.846011Z"}],"euvd":[{"id":"EUVD-2015-5675","description":"The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.","status":"published","published":"2017-03-23T20:00:00Z","modified":"2024-08-06T06:59:04Z","updated_at":"2026-11-03T02:21:58.760301Z"}],"ghsa":[{"id":"GHSA-q9vm-xr73-4r75","title":"The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and...","description":"The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.","status":"published","published":"2022-05-17T02:51:56Z","modified":"2023-01-27T05:05:35Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:42:43.440689Z"}],"nvd":[{"id":"CVE-2015-5729","description":"The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.","status":"published","published":"2017-03-23T20:59:00.39Z","modified":"2026-06-17T00:29:40.017Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:17.368799Z"}]}}