6.5Orta
CVE-2025-53077
Açıklama
An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.
Zayıflık türü (CWE):
CWE-698
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| samsung | data management server firmware | 2.0.0 – < 2.3.13.1 | |
| Samsung Electronics | DMS(Data Management Server) | 2.0.0 – < 2.3.13.1, 2.5.0.17 – < 2.6.14.1, 2.7.0.15 – < 2.9.3.6 |
Kaynaklar ve yamalar
- https://security.samsungda.com/securityUpdates.html Vendor Advisory
CPE eşleşmeleri (NVD) (3)
cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.0.0 < 2.3.13.1cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.5.0.17 < 2.6.14.1cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.7.0.15 < 2.9.3.6