Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.
- http://www.kb.cert.org/vuls/id/882286
No PoCs found on GitHub currently.