CVE-2025-20949

Summary

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Members5.0.00.11unaffected

Weaknesses

  • CWE-35: Path Traversal: '…/…//'

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References