CVE-2025-54453

Samsung MagicINFO 9 Server is affected by CVE-2025-54453 due to a path traversal vulnerability that can lead to code injection/execution in versions prior to 21.1080.0. Public advisories (ZDI-25-669, PT-2025-30541, CNVD, CNVD-2025-20071) describe remote code execution via directory traversal, wit...

PT-2025-30542 · Samsung · Magicinfo 9 Server

Name of the Vulnerable Software and Affected Versions: MagicINFO 9 Server versions prior to 21.1080.0 Description: A use of hard-coded credentials issue exists in Samsung Electronics MagicINFO 9 Server, allowing authentication bypass. Recommendations: Update MagicINFO 9 Server to version 21.1080....