CVE-2021-42913

HIGH

Samsung SyncThru Web Service - Unauthenticated Cleartext Password Exposure via HTML Source Code

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-42913. PoCs published by kernel-cyber.

AI-analyzed exploit summary This exploit targets an improper access control vulnerability in Samsung Printer SCX-6X55X SyncThru Web Service, allowing unauthorized access to SMB user credentials via a direct request to `/smb_serverList.csv`.

Description

The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required.

Exploits (1)

nomisec WORKING POC

by kernel-cyber · poc

https://github.com/kernel-cyber/CVE-2021-42913

View Code ZIP pw:eip

This exploit targets an improper access control vulnerability in Samsung Printer SCX-6X55X SyncThru Web Service, allowing unauthorized access to SMB user credentials via a direct request to `/smb_serverList.csv`.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Samsung Printer SCX-6X55X Series SyncThru Web Service

No auth needed

Prerequisites: Network access to the target printer · SyncThru Web Service enabled

MITRE ATT&CK

T1087 - Account Discovery T1552 - Unsecured Credentials

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://security.samsungmobile.com/securityUpdate.smsb

Various Sources x_refsource_misc

https://medium.com/%40windsormoreira/samsung-printer-scx-6x55x-improper-access-control-cve-2021-42913-bd50837e5e9a

Scores

CVSS v3 7.5

EPSS 0.0179

EPSS Percentile 75.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-522

Status published

Products (1)

samsung/syncthru_web_service

Published Dec 20, 2021

Tracked Since Feb 18, 2026