CVE-2025-53079

EUVD-2025-22974
Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
samsung.tv_applianceCNA
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Affected Products (NVD)
VendorProductVersion
samsungdata_management_server_firmware
2.0.0 ≤
𝑥
< 2.3.13.1
samsungdata_management_server_firmware
2.5.0.17 ≤
𝑥
< 2.6.14.1
samsungdata_management_server_firmware
2.7.0.15 ≤
𝑥
< 2.9.3.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungda.com/securityUpdates.html