Path Traversal Vulnerability in Samsung MagicINFO 9 Server

CVE-2025-54438

What is CVE-2025-54438?

A vulnerability exists in Samsung Electronics' MagicINFO 9 Server that allows an attacker to perform a Path Traversal attack. This flaw enables the uploading of a web shell, which can compromise the server and lead to unauthorized access to restricted directories. Systems using MagicINFO 9 Server versions prior to 21.1080.0 are particularly at risk, making it essential for organizations to implement security measures and updates to safeguard their environments.

References