CVE-2025-4632 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitra…
Critical KEV CVSS: 9.8

CVE-2025-4632

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.
Vendor
Samsung
Product
Magicinfo 9 Server
CWE
CWE-22
Yayın Tarihi
2025-05-13 06:15:36
Güncelleme
2025-11-03 18:58:05
Source Identifier
PSIRT@samsung.com
KEV Date Added
2025-05-22

Kategoriler

CWE-22 Magicinfo 9 Server CRITICAL Samsung 2025

Referanslar

https://security.samsungtv.com/securityUpdates#SVP-MAY-2025 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4632