CVE-2024-7399: high-severity vulnerability in Samsung Electronics MagicINFO 9 Server
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Samsung MagicINFO 9 Server versions before 21.1050 have a flaw that allows attackers to write files anywhere on the system with administrative privileges. This is dangerous because it can lead to complete system compromise.
Path traversal vulnerability (CWE-22) combined with unrestricted file upload (CWE-434) in Samsung MagicINFO 9 Server before version 21.1050 enables remote attackers to bypass directory restrictions and write arbitrary files with system-level permissions. Exploitation requires network access to the affected server and results in complete system compromise through arbitrary code execution or configuration manipulation.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.