6.1Orta
CVE-2025-53082
Açıklama
An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
Zayıflık türü (CWE):
CWE-23
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| samsung | data management server firmware | 2.0.0 – < 2.3.13.1 | |
| Samsung Electronics | Data Management Server | 2.0.0 – < 2.3.13.1, 2.5.0.17 – < 2.6.14.1, 2.7.0.15 – < 2.9.3.6 |
Kaynaklar ve yamalar
- https://security.samsungda.com/securityUpdates.html Vendor Advisory
CPE eşleşmeleri (NVD) (3)
cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.0.0 < 2.3.13.1cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.5.0.17 < 2.6.14.1cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*≥ 2.7.0.15 < 2.9.3.6