by Kastro
Paper/Archive/CVE-2025-20949

CVE-2025-20949

Samsung Mobile Samsung Members — Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the pri…

EPSS 0.3%CVSS 9.1
critical.is priorityof 100
33
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 26.4.264 × 205.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members.

Affected

ProductAffectedFixed inSource
Samsung Memberssee advisory5.0.00.11CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
SamsungMobile (CNA)5.1CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsecurity.samsungmobile.com/serviceWeb.smsb?year=2025&month=05