Read the docs

Samsung

Records2044All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical180CVSS 9.0–10.0
CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV
TI-2024-06858 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-04-24TI-2025-15038 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-11-10TI-2025-15039 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-10-02TI-2025-04133 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-05-22TI-2022-06595 Samsung Mobile Devices Use-After-Free Vulnerability Priority CRITICAL 93KEV 2023-09-18TI-2021-07610 Samsung Mobile Devices Unspecified Vulnerability Priority CRITICAL 89KEV 2023-06-29

Components

Products in the NVD configurations · select one to filter the records
Android 502 records CRITICAL Exynos 1380 Firmware 125 records MEDIUM Exynos 1280 Firmware 118 records HIGH Exynos 980 Firmware 114 records HIGH Exynos 1330 Firmware 99 records MEDIUM Exynos 1080 Firmware 97 records HIGH Exynos 850 Firmware 97 records HIGH Exynos 1480 Firmware 90 records MEDIUM

Records

23 records in Magicinfo 9 Server · all components

TI-2025-04133 CVE-2025-4632 · GHSA-cmww-723f-496g

Path traversal in Samsung MagicINFO 9 Server

Priority CRITICAL 100KEV

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24066 Published 2025-05-13 Fixed in 21.1052 CWE-22
TI-2024-06858 CVE-2024-7399 · GHSA-9x68-238r-w7mq

Path traversal in Samsung MagicINFO 9 Server

Priority CRITICAL 100KEV

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.91941 Published 2024-08-09 Fixed in 21.1050 CWE-22
TI-2025-34252 CVE-2025-54453 · GHSA-vr5w-hv5x-22x2

Path traversal in Samsung MagicINFO 9 Server

Priority HIGH 68

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34269 Published 2025-07-23 No fix listed CWE-22
TI-2025-34244 CVE-2025-54445 · GHSA-pfr4-5hm6-gjrq

XML external entity injection in Samsung MagicINFO 9 Server

Priority HIGH 65

Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.177 Published 2025-07-23 No fix listed CWE-611
TI-2025-34240 CVE-2025-54441 · GHSA-2c95-8839-3cvg

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 56

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.15358 Published 2025-07-23 No fix listed CWE-434
TI-2025-34238 CVE-2025-54439 · GHSA-4g57-hx3x-hg92

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 55

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.13457 Published 2025-07-23 No fix listed CWE-434
TI-2026-20356 CVE-2026-25200 · GHSA-3x3j-v5j3-f2p6

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 50

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.10…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00537 Published 2026-02-02 No fix listed CWE-434
TI-2025-34254 CVE-2025-54455 · GHSA-wvhx-c63w-66jf

Hard-coded credentials in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0078 Published 2025-07-23 No fix listed CWE-798
TI-2025-34253 CVE-2025-54454 · GHSA-7r22-h2x4-44gq

Hard-coded credentials in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00764 Published 2025-07-23 No fix listed CWE-798
TI-2025-34250 CVE-2025-54451 · GHSA-99w8-7mjc-hx26

Code injection in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00779 Published 2025-07-23 No fix listed CWE-94
TI-2025-34248 CVE-2025-54449 · GHSA-9xm8-43cv-2896

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00762 Published 2025-07-23 No fix listed CWE-434
TI-2025-34247 CVE-2025-54448 · GHSA-536w-v7mf-6h82

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00721 Published 2025-07-23 No fix listed CWE-434
TI-2025-34245 CVE-2025-54446 · GHSA-7cmh-95vq-3375

Path traversal in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2025-07-23 No fix listed CWE-22
TI-2025-34243 CVE-2025-54444 · GHSA-w92m-q3ff-mg4m

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00721 Published 2025-07-23 No fix listed CWE-434
TI-2025-34242 CVE-2025-54443 · GHSA-4jvj-cx62-q838

Path traversal in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00694 Published 2025-07-23 No fix listed CWE-22
TI-2025-34241 CVE-2025-54442 · GHSA-7fjc-9q8q-6697

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00571 Published 2025-07-23 No fix listed CWE-434
TI-2025-34239 CVE-2025-54440 · GHSA-f253-6674-7vg2

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00605 Published 2025-07-23 No fix listed CWE-434
TI-2025-34237 CVE-2025-54438 · GHSA-x95c-h7gc-r72r

Path traversal in Samsung MagicINFO 9 Server

Priority MEDIUM 50

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2025-07-23 No fix listed CWE-22
TI-2026-20358 CVE-2026-25202 · GHSA-mwg7-x34r-qwqc

Hard-coded credentials in Samsung MagicINFO 9 Server

Priority MEDIUM 49

The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00475 Published 2026-02-02 No fix listed CWE-798
TI-2025-34251 CVE-2025-54452 · GHSA-pmj5-8hcx-856g

Improper authentication in Samsung MagicINFO 9 Server

Priority MEDIUM 49

Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00524 Published 2025-07-23 No fix listed CWE-287
TI-2025-34249 CVE-2025-54450 · GHSA-qx6v-cwrc-67vg

Path traversal in Samsung MagicINFO 9 Server

Priority MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00711 Published 2025-07-23 No fix listed CWE-22
TI-2025-34246 CVE-2025-54447 · GHSA-m9gc-4vc2-628w

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00579 Published 2025-07-23 No fix listed CWE-434
TI-2026-20357 CVE-2026-25201 · GHSA-c95p-xp25-6cpp

Unrestricted file upload in Samsung MagicINFO 9 Server

Priority MEDIUM 40

An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00443 Published 2026-02-02 No fix listed CWE-434
Open these records in search →