CVE-2025-54445highCWE-611

CVE-2025-54445: high-severity vulnerability in Samsung Electronics MagicINFO 9 Server

Published

Follow this CVE+ Monitor MagicINFO 9 Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

26Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.2epss 18%
Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Affected products
Samsung Electronics · MagicINFO 9 Server
Related CVEs — Samsung Electronics MagicINFO 9 Server

In the same product, most dangerous first.

CVE-2024-7399HIGHCVE-2024-7399EPSS 91.9%KEVCVE-2025-4632CRITICALCVE-2025-4632EPSS 24.1%KEVCVE-2025-54453HIGHCVE-2025-54453EPSS 34.3%CVE-2025-54441HIGHCVE-2025-54441EPSS 15.4%CVE-2025-54439HIGHCVE-2025-54439EPSS 13.5%CVE-2025-54455CRITICALCVE-2025-54455EPSS 0.8%