CVE-2017-16524

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI.

• CWE-434

• https://github.com/realistic-security/CVE-2017-16524Exploit, Issue Tracking, Third Party Advisory
• https://www.exploit-db.com/exploits/43138/Exploit, Issue Tracking, Third Party Advisory, VDB Entry
• https://github.com/realistic-security/CVE-2017-16524Exploit, Issue Tracking, Third Party Advisory
• https://www.exploit-db.com/exploits/43138/Exploit, Issue Tracking, Third Party Advisory, VDB Entry

Published

Nov 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16516In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON fil…7.5
• CVE-2017-1652IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-16520Inedo BuildMaster before 5.8.2 does not properly restrict cr…
• CVE-2017-16521In Inedo BuildMaster before 5.8.2, XslTransform was used whe…
• CVE-2017-16522MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 E…
• CVE-2017-16523MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 E…
• CVE-2017-16525The usb_serial_console_disconnect function in drivers/usb/se…6.6
• CVE-2017-16526drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows …7.8
• CVE-2017-16527sound/usb/mixer.c in the Linux kernel before 4.13.8 allows l…6.6
• CVE-2017-16528sound/core/seq_device.c in the Linux kernel before 4.13.4 al…6.6
• CVE-2017-16529The snd_usb_create_streams function in sound/usb/card.c in t…6.6
• CVE-2017-1653IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Ma…