CVE-2024-7399

8.8HIGH

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

Опубликовано: 8/12/2024Обновлено: 8/13/2024
Посмотреть на NVDПосмотреть на MITRE

Известная эксплуатируемая уязвимость CISA

Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.

Требуемое действие:

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Срок:

2026-05-08

Описание

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

ИИ-АнализНа базе ИИ

Затронутые продукты

samsungmagicinfo_9_server

Ссылки