एक प्रतिबंधित निर्देशिका में पथनाम की अनुचित सीमा ('Path Traversal') भेद्यता Samsung Electronics MagicINFO 9 Server में वेब सर्वर पर वेब शेल अपलोड करने की अनुमति देती है। यह समस्या MagicINFO को प्रभावित करती है

The primary impact of CVE-2025-54438 is the ability for an attacker to upload a web shell to the MagicINFO 9 Server. Once a web shell is successfully uploaded, the attacker can execute arbitrary code on the server with the privileges of the MagicINFO 9 Server process. This could lead to complete system compromise, including data exfiltration, modification, or deletion. The attacker could also leverage the compromised server as a pivot point to move laterally within the network, targeting other systems connected to the same network as the MagicINFO 9 Server. The potential blast radius is significant, particularly in environments where the MagicINFO 9 Server has access to sensitive data or critical infrastructure.

Organizations utilizing Samsung MagicINFO 9 Server in their digital signage deployments are at risk, particularly those running versions prior to 21.1080.0. Environments with limited network segmentation and weak file upload validation controls are especially vulnerable. Shared hosting environments where multiple users share the same MagicINFO 9 Server instance also face increased risk.

1. 2025-07-23Disclosure

   disclosure

1. आरक्षित2025-07-22
2. प्रकाशित2025-07-23
3. संशोधित2026-02-26
4. EPSS अद्यतन2026-03-23

The primary mitigation for CVE-2025-54438 is to upgrade to a patched version of Samsung MagicINFO 9 Server as soon as it becomes available. Until a patch is available, implement temporary mitigations to reduce the risk. These include implementing strict file upload validation to prevent the upload of malicious files, restricting file upload locations to a dedicated directory with limited permissions, and segmenting the network to isolate the MagicINFO 9 Server from other critical systems. Consider using a Web Application Firewall (WAF) to filter out malicious requests targeting the upload endpoint. Monitor file system activity for any unauthorized file uploads or modifications.