CVE-2025-53077
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Summary
An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Samsung Electronics | DMS(Data Management Server) | 2.0.0 < 2.3.13.1 | affected |
| Samsung Electronics | DMS(Data Management Server) | 2.5.0.17 < 2.6.14.1 | affected |
| Samsung Electronics | DMS(Data Management Server) | 2.7.0.15 < 2.9.3.6 | affected |
Weaknesses
- CWE-698: CWE-698 Execution After Redirect (EAR)
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.