Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit

🗓️ 14 May 2025 17:57:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 53 Views

Samsung patches critical flaw CVE-2025-4632 in MagicINFO 9 Server exploited by Mirai Botnet attacks.

Reporter	Title	Published	Views	Family All 42
GithubExploit	Exploit for Path Traversal in Samsung Magicinfo_9_Server	6 May 202619:55	–	githubexploit
GithubExploit	Exploit for Path Traversal in Samsung Magicinfo_9_Server	4 Jun 202516:14	–	githubexploit
GithubExploit	Exploit for Path Traversal in Samsung Magicinfo_9_Server	30 May 202515:42	–	githubexploit
ATTACKERKB	CVE-2025-4632	13 May 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of the HttpServletRequest.getParameter() function in the centralized multimedia content management system MagicINFO 9 allows a hacker to execute arbitrary code.	26 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the MagicINFO 9 centralized multimedia content management system lies in the improper restriction on the path name to the restricted catalog. This allows a malicious actor to gain access and add arbitrary files.	26 May 202500:00	–	bdu_fstec
Circl	CVE-2024-7399	5 May 202519:18	–	circl
Circl	CVE-2025-4632	13 May 202506:30	–	circl
CISA KEV Catalog	Samsung MagicINFO 9 Server Path Traversal Vulnerability	24 Apr 202600:00	–	cisa_kev
CISA KEV Catalog	Samsung MagicINFO 9 Server Path Traversal Vulnerability	22 May 202500:00	–	cisa_kev

23 May 2025 07:22Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.91941

SSVC

samsung security update magicinfo 9 server cve-2025-4632 path traversal flaw mirai botnet cybersecurity threat.