What is the CVSS score of CVE-2026-25203?

CVE-2026-25203 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Samsung are affected by CVE-2026-25203?

Samsung MagicINFO 9 Server contains a local privilege escalation vulnerability affecting versions before 21.1091.1 that allows authenticated low-privileged users to gain system-level control through…

How to fix or mitigate CVE-2026-25203?

Within 24 hours: Identify all Samsung MagicINFO 9 Server installations and document current versions using vendor tools or administrative consoles. Within 7 days: Upgrade all instances to version 21.1091.1 or later per Samsung security advisory; if upgrade is not feasible, restrict local access to trusted administrators only and implement filesystem permission audits on installation directories. Within 30 days: Complete post-upgrade validation, audit user access controls for all MagicINFO Server instances, and review logs for unauthorized privilege escalation attempts.

Samsung CVE-2026-25203

EUVD-2026-21252 HIGH

Incorrect Default Permissions (CWE-276)

2026-04-10 samsung.tv_appliance

Samsung Privilege Escalation

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 01:45 euvd

EUVD-2026-21252

Analysis Generated

Apr 10, 2026 - 01:45 vuln.today

CVE Published

Apr 10, 2026 - 01:24 nvd

HIGH 7.8

DescriptionCVE.org

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability

This issue affects MagicINFO 9 Server: less than 21.1091.1.

AnalysisAI

Local privilege escalation in Samsung MagicINFO 9 Server versions prior to 21.1091.1 enables authenticated low-privileged users to escalate to high privileges through incorrect default file/directory permissions. Attackers with local access can obtain complete system control, compromising confidentiality, integrity, and availability. Attack requires local access and low-level authentication but no user interaction. No public exploit identified at time of analysis.

Technical ContextAI

Root cause stems from CWE-276 (Incorrect Default Permissions) where critical MagicINFO server files or directories are configured with overly permissive access controls, allowing authenticated users to modify sensitive resources. CVSS vector AV:L/PR:L indicates exploitation requires local system access with existing low-privilege credentials. The S:U scope parameter confirms privilege escalation remains contained within the vulnerable component.

RemediationAI

Vendor-released patch: upgrade to Samsung MagicINFO 9 Server version 21.1091.1 or later, which remediates the incorrect default permissions. Consult official advisory at https://security.samsungtv.com/securityUpdates for installation instructions and release notes. Until patching is feasible, implement compensating controls including restricting local user account creation, enforcing principle of least privilege through system-level access controls, and monitoring file system permissions on MagicINFO installation directories for unauthorized modifications. Audit existing user permissions to ensure no low-privilege accounts have unnecessary access to server directories. Disable or restrict local interactive logon for non-administrative accounts where operationally viable.