Critical severity9.8CISA KEVNVD Advisory· Published May 13, 2025· Updated Jun 17, 2026
CVE-2025-4632
CVE-2025-4632
Description
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:samsung:magicinfo_9_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:samsung:magicinfo_9_server:*:*:*:*:*:*:*:*range: <21.1052.0
- (no CPE)range: <21.1052
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- security.samsungtv.com/securityUpdatesnvdPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.