Samsung MagicINFO 9 Server Path Traversal Vulnerability

概要

参考情報

• security.samsungtv.com/securityUpdates · Vendor Advisory
• arcticwolf.com/resources/blog-uk/arctic-wolf-observes-exploitation-of-path-traversal-vulnerability-in-samsung-magicinfo-9-server-cve-2024-7399 · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-7399

magicinfo 9 server のその他の脆弱性

• CVE-2026-25202緊急 9.8The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue …
• CVE-2026-25201高 8.8An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue …
• CVE-2026-25200緊急 9.8A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can r…
• CVE-2025-54455緊急 9.8Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicI…
• CVE-2025-54454緊急 9.8Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicI…