4.9

CVE-2025-53079

Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ Data Management Server Firmware Version >= 2.0.0 < 2.3.13.1
   Samsung ≫ Data Management Server Version-
Samsung ≫ Data Management Server Firmware Version >= 2.5.0.17 < 2.6.14.1
   Samsung ≫ Data Management Server Version-
Samsung ≫ Data Management Server Firmware Version >= 2.7.0.15 < 2.9.3.6
   Samsung ≫ Data Management Server Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.318
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
PSIRT@samsung.com 4.9 1.2 3.6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CWE-36 Absolute Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory.