CVE-2025-53079

Summary

Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files

Affected Software

VendorProductVersion RangeStatus
Samsung ElectronicsData Management Server2.0.0 < 2.3.13.1affected
Samsung ElectronicsData Management Server2.5.0.17 < 2.6.14.1affected
Samsung ElectronicsData Management Server2.7.0.15 < 2.9.3.6affected

Weaknesses

  • CWE-36: CWE-36 Absolute Path Traversal

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References