CVE-2024-7399
8.8HIGHImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.
Published: 8/12/2024Updated: 8/13/2024
CISA Known Exploited Vulnerability
Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.
Required Action:
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date:
2026-05-08
Description
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.
AI AnalysisPowered by AI
Affected Products
samsungmagicinfo_9_server
References
- https://security.samsungtv.com/securityUpdatesVendor Advisory