The vulnerability identified as CVE-2024-7399 affects Samsung MagicINFO 9 Server prior to version 21.1050. It is caused by improper limitation of a pathname to a restricted directory (CWE-22), enabling attackers with limited privileges to perform path traversal and write arbitrary files with system-level permissions. This vulnerability also relates to CWE-434, indicating unsafe file upload or handling. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. No patch or vendor advisory details are currently available to confirm remediation status.

Successful exploitation allows an attacker with limited privileges to write arbitrary files as system authority, potentially leading to full system compromise including unauthorized data access, modification, or denial of service. The high CVSS score (8.8) indicates critical impacts on confidentiality, integrity, and availability of the affected server.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the MagicINFO 9 Server to trusted users only and monitor for suspicious activity related to file writes. Avoid exposing the server to untrusted networks or users.