CVE-2023-41270

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Nov 8, 2023
Updated: Aug 2, 2024
CWE ID 307

Summary

CVE-2023-41270 is a vulnerability affecting Samsung Smart TVs, specifically the UE40D7000 model and older versions with firmware T-GAPDEUC-1033.2. This issue involves an Improper Restriction of Excessive Authentication Attempts, allowing attackers to launch a denial-of-service attack using WPS attack tools. By exploiting this weakness, adversaries can overload the TV's WPS function with excessive authentication attempts, causing it to crash or become unresponsive. This vulnerability could potentially disrupt the user experience and require a manual reset to restore functionality.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share