FlagThis
← Back to CVE List
Vulnerability Intelligence Report
Samsung MagicINFO 9 Server Path Traversal Vulnerability

CVE-2024-7399

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

CISA KEV Nuclei Template SSVC: Active Exploitation Automatable
CVSS Base Score
8.8
HIGH
Exploitability:2.9
Impact Score:5.9
EPSS Probability:91.94%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-22 ↗CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-434 ↗CWE-434 Unrestricted Upload of File with Dangerous Type

Affected Products & Versions

Vendor Product Affected Versions
Samsung Electronics MagicINFO 9 Server 0 < 21.1050 (affected)

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

CISA KEV
ACTIVE IN CATALOG
Nuclei Template
SCANNER AVAILABLE
EPSS Score
91.941%
GitHub Advisory
GHSA-9x68-238r-w7mq ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthoritySamsung TV & Appliance · Open Source · South Korea
Reserved2024-08-02T00:29:57
Published2024-08-09T04:43:29
Patch Date2024-08-08
Last Updated2026-04-25T03:55:30

Related Intelligence

Related CVEs
CVE-2026-25202 CVSS 9.8 — The database account and password are hardcoded, allowing login with t…
CVE-2026-25200 CVSS 9.8 — A vulnerability in MagicInfo9 Server allows authorized users to upload…
CVE-2025-54438 CVSS 9.8 — Improper Limitation of a Pathname to a Restricted Directory ('Path Tra…
CVE-2025-54444 CVSS 9.8 — Unrestricted Upload of File with Dangerous Type vulnerability in Samsu…
CVE-2025-54443 CVSS 9.8 — Improper Limitation of a Pathname to a Restricted Directory ('Path Tra…
LINK COPIED TO CLIPBOARD