6.4Mittel
CVE-2025-53081
Beschreibung
An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
Schwachstellentyp (CWE):
CWE-22
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| samsung | data management server firmware | 2.0.0 – < 2.3.13.1 | |
| Samsung Electronics | Data Management Server | 2.0.0 – < 2.3.13.1, 2.5.0.17 – < 2.6.14.1, 2.7.0.15 – < 2.9.3.6 |
Referenzen und Patches
- https://security.samsungda.com/securityUpdates.html Vendor Advisory
CPE-Treffer (NVD) (3)
cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.0.0 < 2.3.13.1cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.5.0.17 < 2.6.14.1cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.7.0.15 < 2.9.3.6