CVE-2025-4632
CRITICAL KEV NUCLEISamsung MagicINFO <21.1052 - Path Traversal
Title source: llmExploitation Summary
CVE-2025-4632 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 22, 2025. EIP tracks 2 public exploits from researchers including digitalsurgn, MantisToboggan-git. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2025-4632, an unauthenticated RCE vulnerability in Samsung MagicINFO 9 Server. The exploit leverages path traversal in the `SWUpdateFileUploader` servlet to write arbitrary files to the web root, enabling remote code execution.
Description
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.
Exploits (2)
This repository contains a functional Python exploit for CVE-2025-4632, an unauthenticated RCE vulnerability in Samsung MagicINFO 9 Server. The exploit leverages path traversal in the `SWUpdateFileUploader` servlet to write arbitrary files to the web root, enabling remote code execution.
The repository contains only a README.md file with minimal information, lacking any actual exploit code or technical details for CVE-2025-4632.
Nuclei Templates (1)
Server: magicinfo premium server
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H