CVEvulnerability

CVE-2025-53082

9.1 CRITICAL Published 2025-07-29 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-23

Description

An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

Affected configurations

• samsung data management server firmware (>= 2.0.0 < 2.3.13.1) • samsung data management server firmware (>= 2.5.0.17 < 2.6.14.1) • samsung data management server firmware (>= 2.7.0.15 < 2.9.3.6)

Related

Weakness · CWE (1)

  • CWE-23 Relative Path Traversal weakness

References