CVE-2025-53082

EUVD-2025-22972
An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
samsung.tv_applianceCNA
6.1 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
samsungdata_management_server_firmware
2.0.0 ≤
𝑥
< 2.3.13.1
samsungdata_management_server_firmware
2.5.0.17 ≤
𝑥
< 2.6.14.1
samsungdata_management_server_firmware
2.7.0.15 ≤
𝑥
< 2.9.3.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungda.com/securityUpdates.html