IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de Samsung Electronics (CVE)

Registros CVE publicados para Samsung Electronics, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

MagicINFO 9 Server 24Data Management Server 5WLAN AP WEA453e 1DMS(Data Management Server) 1
31 resultados
7.8Alta
CVE-2026-25203
Samsung Electronics MagicINFO 9 Server

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.

9.8Crítica
CVE-2026-25202
Samsung Electronics MagicINFO 9 Server

The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.

8.8Alta
CVE-2026-25201
Samsung Electronics MagicINFO 9 Server

An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.

9.8Crítica
CVE-2026-25200
Samsung Electronics MagicINFO 9 Server

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.

6.1Media
CVE-2025-53082
Samsung Electronics Data Management Server

An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

6.4Media
CVE-2025-53081
Samsung Electronics Data Management Server

An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

7.1Alta
CVE-2025-53080
Samsung Electronics Data Management Server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations on the filesystem

4.9Media
CVE-2025-53079
Samsung Electronics Data Management Server

Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files

8.0Alta
CVE-2025-53078
Samsung Electronics Data Management Server

Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system

6.5Media
CVE-2025-53077
Samsung Electronics DMS(Data Management Server)

An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.

8.8Alta
CVE-2025-54439
Samsung Electronics MagicINFO 9 Server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

13%EPSS
9.8Crítica
CVE-2025-54438
Samsung Electronics MagicINFO 9 Server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0

9.8Crítica
CVE-2025-54444
Samsung Electronics MagicINFO 9 Server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

9.8Crítica
CVE-2025-54443
Samsung Electronics MagicINFO 9 Server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0

9.8Crítica
CVE-2025-54442
Samsung Electronics MagicINFO 9 Server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

8.8Alta
CVE-2025-54441
Samsung Electronics MagicINFO 9 Server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

15%EPSS
9.8Crítica
CVE-2025-54440
Samsung Electronics MagicINFO 9 Server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

8.1Alta
CVE-2025-54447
Samsung Electronics MagicINFO 9 Server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

9.8Crítica
CVE-2025-54446
Samsung Electronics MagicINFO 9 Server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0

8.2Alta
CVE-2025-54445
Samsung Electronics MagicINFO 9 Server

Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0.

18%EPSS
9.8Crítica
CVE-2025-54448
Samsung Electronics MagicINFO 9 Server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

8.8Alta
CVE-2025-54453
Samsung Electronics MagicINFO 9 Server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

34%EPSS
7.3Alta
CVE-2025-54452
Samsung Electronics MagicINFO 9 Server

Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.

9.8Crítica
CVE-2025-54451
Samsung Electronics MagicINFO 9 Server

Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

7.2Alta
CVE-2025-54450
Samsung Electronics MagicINFO 9 Server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.