CVE-2025-54454

Description

References

• security.samsungtv.com/securityUpdates · Vendor Advisory

Mais vulnerabilidades de magicinfo 9 server

• CVE-2026-25202CRÍTICO 9.8The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue …
• CVE-2026-25201ALTO 8.8An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue …
• CVE-2026-25200CRÍTICO 9.8A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can r…
• CVE-2025-54455CRÍTICO 9.8Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicI…
• CVE-2025-54453CRÍTICO 9.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow…