6.5Mittel
CVE-2025-53077
Beschreibung
An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.
Schwachstellentyp (CWE):
CWE-698
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| samsung | data management server firmware | 2.0.0 – < 2.3.13.1 | |
| Samsung Electronics | DMS(Data Management Server) | 2.0.0 – < 2.3.13.1, 2.5.0.17 – < 2.6.14.1, 2.7.0.15 – < 2.9.3.6 |
Referenzen und Patches
- https://security.samsungda.com/securityUpdates.html Vendor Advisory
CPE-Treffer (NVD) (3)
cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.0.0 < 2.3.13.1cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.5.0.17 < 2.6.14.1cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.7.0.15 < 2.9.3.6