← Back

CVE-2025-53081

nvd nist
Published: Jul 29, 2025Modified: Aug 11, 2025

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

Affected (3)

Samsung
1 product
Data Management Server Firmware
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Samsung
Data Management Server Firmware
From 2.0.0 to 2.3.13.1
Data Management Server Firmware
From 2.5.0.17 to 2.6.14.1
Data Management Server Firmware
From 2.7.0.15 to 2.9.3.6
Running on/withPlatform Versions
Samsung
Data Management Server
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

Source: PSIRT@samsung.com
Vendor Advisory

Timeline

No history available yet.