Samsung Electronics vulnerabilities, page 2

32 vulnerabilities

Known vulnerabilities in Samsung Electronics products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.

9.8CVE-2025-53078samsung electronicsdata management server+1
EPSS score
0.43%
Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system7.1CVE-2025-53080samsung electronicsdata management server+1
EPSS score
0.35%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations on the filesystem9.1CVE-2025-53082samsung electronicsdata management server+1
EPSS score
0.48%
An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.6.5CVE-2025-53077samsung electronicsdms(data management server)+1
EPSS score
0.35%
An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.4.9CVE-2025-53079samsung electronicsdata management server+1
EPSS score
0.47%
Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files9.3CVE-2025-34068samsung electronicswlan ap wea453e
EPSS score
1.01%
An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are executed with root privileges on the underlying operating system. An attacker can exploit this by crafting a request that injects shell commands to create output files in writable directories and then access their contents via the download endpoint. This flaw allows complete compromise of the device without authentication. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.7.8CVE-2020-7811samsung electronicssamsung update+1
EPSS score
0.71%
Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication9.8CVE-2024-7399samsung electronicsmagicinfo 9 server+1KEV
EPSS score
91.94%
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.7.8CVE-2026-25203samsung electronicsmagicinfo 9 server
EPSS score
0.18%
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.9.8CVE-2026-25200samsung electronicsmagicinfo 9 server+1
EPSS score
0.55%
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.9.8CVE-2026-25202samsung electronicsmagicinfo 9 server+1
EPSS score
0.48%
The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.8.8CVE-2026-25201samsung electronicsmagicinfo 9 server+1
EPSS score
0.45%
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.