CVE-2025-4632: critical vulnerability in Samsung Electronics MagicINFO 9 Server
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Samsung MagicINFO 9 Server has a path traversal flaw that lets attackers write files anywhere on the system with admin privileges. This is dangerous because attackers can install malware, modify critical system files, or take complete control of the server.
CWE-22 path traversal vulnerability in Samsung MagicINFO 9 Server <21.1052 permits attackers to bypass directory restrictions and write arbitrary files with system-level privileges. The attack vector is network-based with low attack complexity; successful exploitation enables arbitrary code execution and complete system compromise.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.