Samsung Magicinfo 9 Server vulnerabilities
23 vulnerabilities
Known vulnerabilities in Samsung Magicinfo 9 Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-54441samsung electronicsmagicinfo 9 server+1
EPSS score11.94%
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54444samsung electronicsmagicinfo 9 server+1EPSS score0.69%
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54455samsung electronicsmagicinfo 9 server+1EPSS score0.75%
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54442samsung electronicsmagicinfo 9 server+1EPSS score0.55%
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54445samsung electronicsmagicinfo 9 server+1EPSS score13.79%
Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54447samsung electronicsmagicinfo 9 server+1EPSS score0.54%
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54448samsung electronicsmagicinfo 9 server+1EPSS score0.69%
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54450samsung electronicsmagicinfo 9 server+1EPSS score0.68%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54438samsung electronicsmagicinfo 9 server+1EPSS score0.71%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0CVE-2025-54443samsung electronicsmagicinfo 9 server+1EPSS score0.67%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0CVE-2025-54454samsung electronicsmagicinfo 9 server+1EPSS score0.73%
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54446samsung electronicsmagicinfo 9 server+1EPSS score0.71%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0CVE-2025-54449samsung electronicsmagicinfo 9 server+1EPSS score0.73%
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54453samsung electronicsmagicinfo 9 server+1EPSS score27.28%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54440samsung electronicsmagicinfo 9 server+1EPSS score0.58%
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54451samsung electronicsmagicinfo 9 server+1EPSS score0.75%
Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54452samsung electronicsmagicinfo 9 server+1EPSS score0.50%
Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-54439samsung electronicsmagicinfo 9 server+1EPSS score10.44%
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.CVE-2025-4632samsung electronicsmagicinfo 9 server+1KEVEPSS score24.07%
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.CVE-2024-7399samsung electronicsmagicinfo 9 server+1KEVEPSS score91.94%
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.