Paper/Archive/CVE-2025-53081

CVE-2025-53081

Samsung Electronics Data Management Server — An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on…

EPSS 0.4%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 37.2.372 × 207.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

Affected

ProductAffectedFixed inSource

Data Management Server2.0.0 – < 2.3.13.12.3.13.1CNA

Data Management Server2.5.0.17 – < 2.6.14.12.6.14.1CNA

Data Management Server2.7.0.15 – < 2.9.3.62.9.3.6CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

samsung.tv_appliance (CNA)6.4CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsecurity.samsungda.com/securityUpdates.html