Threat database

29 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.7%	CVE-2025-54448MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 0.7%2025-07-23CVE Database V5CVE-2025-54448 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.7%Vulnerability Samsung Electronics #cwe-434 United States+9	CVE Database V5	2025-07-23
High	8.8	EPSS 34%	CVE-2025-54453MagicINFO 9 Server · Path Traversal High8.8EPSS 34%2025-07-23CVE Database V5CVE-2025-54453 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 34%Vulnerability Samsung Electronics #cwe-22 United States+9	CVE Database V5	2025-07-23
High	7.3	EPSS 0.5%	CVE-2025-54452MagicINFO 9 Server · Improper Authentication High7.3EPSS 0.5%2025-07-23CVE Database V5CVE-2025-54452 Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.5%Vulnerability Samsung Electronics #cwe-287 Germany+7	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.8%	CVE-2025-54451MagicINFO 9 Server · Code Injection Critical9.8EPSS 0.8%2025-07-23CVE Database V5CVE-2025-54451 Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.8%Vulnerability Samsung Electronics #cwe-94 United States+9	CVE Database V5	2025-07-23
High	7.2	EPSS 0.7%	CVE-2025-54450MagicINFO 9 Server · Path Traversal High7.2EPSS 0.7%2025-07-23CVE Database V5CVE-2025-54450 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.7%Vulnerability Samsung Electronics #cwe-22 United States+9	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.8%	CVE-2025-54449MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 0.8%2025-07-23CVE Database V5CVE-2025-54449 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.8%Vulnerability Samsung Electronics #cwe-434 United States+8	CVE Database V5	2025-07-23
Critical	9.1	EPSS 0.8%	CVE-2025-54455MagicINFO 9 Server · Use of Hard-coded Credentials Critical9.1EPSS 0.8%2025-07-23CVE Database V5CVE-2025-54455 Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.8%Vulnerability Samsung Electronics #cwe-798 United States+9	CVE Database V5	2025-07-23
Critical	9.1	EPSS 0.8%	CVE-2025-54454MagicINFO 9 Server · Use of Hard-coded Credentials Critical9.1EPSS 0.8%2025-07-23CVE Database V5CVE-2025-54454 Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.8%Vulnerability Samsung Electronics #cwe-798 United States+9	CVE Database V5	2025-07-23
Critical	9.3	EPSS 1.0%	CVE-2025-34068WLAN AP WEA453e · Missing Authentication for Critical Function Critical9.3EPSS 1.0%2025-07-15CVE Database V5CVE-2025-34068 An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are executed with root privileges on the underlying operating system. An attacker can exploit this by crafting a request that injects shell commands to create output files in writable directories and then access their contents via the download endpoint. This flaw allows complete compromise of the device without authentication. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC. EPSS 1.0%Vulnerability Samsung Electronics #cwe-306 Germany+8	CVE Database V5	2025-07-15

Showing 21–29 of 29 results