← Back

CVE-2025-53082

nvd nist
Published: Jul 29, 2025Modified: Aug 11, 2025

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

Affected (3)

Samsung
1 product
Data Management Server Firmware
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Samsung
Data Management Server Firmware
From 2.0.0 to 2.3.13.1
Data Management Server Firmware
From 2.5.0.17 to 2.6.14.1
Data Management Server Firmware
From 2.7.0.15 to 2.9.3.6
Running on/withPlatform Versions
Samsung
Data Management Server
All versions

Related CWEs

CWE-23
Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

References (1)

Source: PSIRT@samsung.com
Vendor Advisory

Timeline

No history available yet.