CVEvulnerability

CVE-2025-53081

9.1 CRITICAL Published 2025-07-29 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-22

Description

An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

Affected configurations

• samsung data management server firmware (>= 2.0.0 < 2.3.13.1) • samsung data management server firmware (>= 2.5.0.17 < 2.6.14.1) • samsung data management server firmware (>= 2.7.0.15 < 2.9.3.6)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References