CVE-2025-53078

Summary

Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system

Affected Software

VendorProductVersion RangeStatus
Samsung ElectronicsData Management Server2.0.0 < 2.3.13.1affected
Samsung ElectronicsData Management Server2.5.0.17 < 2.6.14.1affected
Samsung ElectronicsData Management Server2.7.0.15 < 2.9.3.6affected

Weaknesses

  • CWE-502: CWE-502 Deserialization of Untrusted Data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References