Magicinfo 9 Server
Monthly
Local privilege escalation in Samsung MagicINFO 9 Server versions prior to 21.1091.1 enables authenticated low-privileged users to escalate to high privileges through incorrect default file/directory permissions. Attackers with local access can obtain complete system control, compromising confidentiality, integrity, and availability. Attack requires local access and low-level authentication but no user interaction. No public exploit identified at time of analysis.
Hardcoded database credentials in Samsung MagicInfo9 Server allow direct database access and manipulation.
Remote code execution in MagicInfo 9 Server (versions prior to 21.1090.1) allows unauthenticated attackers to upload arbitrary files without authentication, resulting in complete system compromise with high confidentiality, integrity, and availability impact. The vulnerability enables privilege escalation and requires only user interaction to trigger. No patch is currently available for this critical flaw affecting all vulnerable MagicInfo 9 Server installations.
Unauthenticated file upload leading to stored XSS and potential RCE in Samsung MagicInfo9 Server. HTML files uploaded without authentication.
Samsung MagicINFO 9 Server contains a path traversal vulnerability allowing unauthenticated attackers to write arbitrary files as SYSTEM authority, enabling complete server compromise.
Remote, unauthenticated attackers can write files of their choosing with system-level authority on Samsung MagicINFO 9 Server installations running any version before 21.1050, abusing a pathname-restriction failure that lets crafted paths escape the directory the application intends to confine writes to. The vulnerability is confirmed actively exploited (CISA KEV), publicly available exploit code exists, and EPSS stands at 71.0% (99th percentile), so any MagicINFO 9 server reachable from an untrusted network should be treated as a high-probability target and potentially already compromised until verified otherwise. The assessed vector (AV:N/AC:L/PR:N/UI:N) confirms that no credentials, user interaction, or special configuration are required - the only real precondition is that the server's interface is reachable by the attacker.
Local privilege escalation in Samsung MagicINFO 9 Server versions prior to 21.1091.1 enables authenticated low-privileged users to escalate to high privileges through incorrect default file/directory permissions. Attackers with local access can obtain complete system control, compromising confidentiality, integrity, and availability. Attack requires local access and low-level authentication but no user interaction. No public exploit identified at time of analysis.
Hardcoded database credentials in Samsung MagicInfo9 Server allow direct database access and manipulation.
Remote code execution in MagicInfo 9 Server (versions prior to 21.1090.1) allows unauthenticated attackers to upload arbitrary files without authentication, resulting in complete system compromise with high confidentiality, integrity, and availability impact. The vulnerability enables privilege escalation and requires only user interaction to trigger. No patch is currently available for this critical flaw affecting all vulnerable MagicInfo 9 Server installations.
Unauthenticated file upload leading to stored XSS and potential RCE in Samsung MagicInfo9 Server. HTML files uploaded without authentication.
Samsung MagicINFO 9 Server contains a path traversal vulnerability allowing unauthenticated attackers to write arbitrary files as SYSTEM authority, enabling complete server compromise.
Remote, unauthenticated attackers can write files of their choosing with system-level authority on Samsung MagicINFO 9 Server installations running any version before 21.1050, abusing a pathname-restriction failure that lets crafted paths escape the directory the application intends to confine writes to. The vulnerability is confirmed actively exploited (CISA KEV), publicly available exploit code exists, and EPSS stands at 71.0% (99th percentile), so any MagicINFO 9 server reachable from an untrusted network should be treated as a high-probability target and potentially already compromised until verified otherwise. The assessed vector (AV:N/AC:L/PR:N/UI:N) confirms that no credentials, user interaction, or special configuration are required - the only real precondition is that the server's interface is reachable by the attacker.