Samsung Data Management Server vulnerabilities

7 vulnerabilities

Known vulnerabilities in Samsung Data Management Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.1CVE-2025-53081samsung electronicsdata management server+1
EPSS score
0.40%
An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.9.8CVE-2025-53078samsung electronicsdata management server+1
EPSS score
0.43%
Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system7.1CVE-2025-53080samsung electronicsdata management server+1
EPSS score
0.35%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations on the filesystem9.1CVE-2025-53082samsung electronicsdata management server+1
EPSS score
0.48%
An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.6.5CVE-2025-53077samsung electronicsdms(data management server)+1
EPSS score
0.35%
An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.4.9CVE-2025-53079samsung electronicsdata management server+1
EPSS score
0.47%
Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files7.5CVE-2010-4284samsungdata_management_server
EPSS score
1.78%
SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server (DMS) before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors.