CVE-2025-4632CISA KEV: Actively Exploited

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Published May 22, 2025·Updated May 22, 2025

Description

Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.

Public Exploits & PoCs1 found

PoC: CVE-2025-4632_POC

This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution (RCE) vulnerability in Samsung MagicINFO 9 Server (versions prior to 21.1052).

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free