← Back

CVE-2025-53077

nvd nist
Published: Jul 29, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Exploitability: 3.9 / Impact: 2.5
Source: PSIRT@samsung.com (Secondary)

Description

An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.

Affected (3)

Samsung
1 product
Data Management Server Firmware
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Samsung
Data Management Server Firmware
From 2.0.0 to 2.3.13.1
Data Management Server Firmware
From 2.5.0.17 to 2.6.14.1
Data Management Server Firmware
From 2.7.0.15 to 2.9.3.6
Running on/withPlatform Versions
Samsung
Data Management Server
All versions

Related CWEs

CWE-698
Execution After Redirect (EAR)
The web application sends a redirect to another location, but instead of exiting, it executes additional code.

References (1)

Source: PSIRT@samsung.com
Vendor Advisory

Timeline

No history available yet.