CVE-2012-5858
Samsung Kies Air 2.1.207051 and 2.1.210161 - Improper Authentication via IP Address Spoofing
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-5858.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in the `unique_service_name()` function of libupnp's SSDP processor, allowing remote code execution on vulnerable devices. It uses a staged payload approach to bypass size limitations and includes ROP chains for specific targets like Supermicro IPMI devices.
Description
Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address.
Exploits (1)
This Metasploit module exploits a buffer overflow in the `unique_service_name()` function of libupnp's SSDP processor, allowing remote code execution on vulnerable devices. It uses a staged payload approach to bypass size limitations and includes ROP chains for specific targets like Supermicro IPMI devices.