VULNERABILITY INTELLIGENCE
CVE-2014-3911
CVSS score9.3 HIGH
EPSS probability5.59%
CISA KEVNot currently listed
Published2014-06-11
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')