CVE:CVE-2019-7418
CNNVD:CNNVD-201902-607
使用V6.A6.25版本固件和V11.01.05.25_08-21-2015版本固件的SAMSUNG X7400GX SyncThru Web Service中存在跨站脚本漏洞。远程攻击者可借助‘flag’、‘frame’、‘func’和‘Nfunc’参数利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade samsung syncthru_web_service to a higher version than -; Upgrade samsung x7400gx_firmware to a higher version than 6.a6.25,and avoid the version 6.a6.25