Code Injection Vulnerability in Samsung MagicINFO 9 Server
CVE-2025-54451

9.8CRITICAL

Key Information:

Vendor
CVE Published:
23 July 2025

What is CVE-2025-54451?

A vulnerability in Samsung Electronics' MagicINFO 9 Server enables attackers to perform code injection. This flaw affects versions prior to 21.1080.0, posing significant risks to the integrity and confidentiality of systems utilizing the software. By exploiting this issue, malicious actors could inject harmful code, resulting in unauthorized actions and potential data breaches. Users and administrators should ensure their systems are updated to mitigate these risks. For further information and security updates, please refer to Samsung's security portal.

Affected Version(s)

MagicINFO 9 Server 21.1080.0

References

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-54451 : Code Injection Vulnerability in Samsung MagicINFO 9 Server