FlagThis
← Back to CVE List
Vulnerability Intelligence Report

CVE-2025-54444

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:0.60%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-434 ↗CWE-434 Unrestricted Upload of File with Dangerous Type

Affected Products & Versions

Vendor Product Affected Versions
Samsung Electronics MagicINFO 9 Server 21.1080.0 (affected)

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

EPSS Score
0.597%
GitHub Advisory
GHSA-w92m-q3ff-mg4m ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthoritySamsung TV & Appliance · Open Source · South Korea
Reserved2025-07-22T03:20:53
Published2025-07-23T05:35:43
Last Updated2026-02-26T17:50:17

Related Intelligence

Related CVEs
CVE-2026-25202 CVSS 9.8 — The database account and password are hardcoded, allowing login with t…
CVE-2026-25200 CVSS 9.8 — A vulnerability in MagicInfo9 Server allows authorized users to upload…
CVE-2025-54438 CVSS 9.8 — Improper Limitation of a Pathname to a Restricted Directory ('Path Tra…
CVE-2025-54443 CVSS 9.8 — Improper Limitation of a Pathname to a Restricted Directory ('Path Tra…
CVE-2025-54442 CVSS 9.8 — Unrestricted Upload of File with Dangerous Type vulnerability in Samsu…
LINK COPIED TO CLIPBOARD