Paper/Archive/CVE-2025-53082

CVE-2025-53082

Samsung Electronics Data Management Server — An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations…

EPSS 0.5%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 44.3.443 × 208.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

Affected

ProductAffectedFixed inSource

Data Management Server2.0.0 – < 2.3.13.12.3.13.1CNA

Data Management Server2.5.0.17 – < 2.6.14.12.6.14.1CNA

Data Management Server2.7.0.15 – < 2.9.3.62.9.3.6CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

samsung.tv_appliance (CNA)6.1CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsecurity.samsungda.com/securityUpdates.html