CVE-2025-53081

MEDIUM

Samsung Data Management Server Firmware >=2.0.0 <2.3.13.1 - Arbitrary File Creation via Path Traversal

Title source: llm
STIX 2.1

Description

An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

References (1)

Core 1
Core References

Scores

CVSS v3 6.4
EPSS 0.0078
EPSS Percentile 74.0%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (1)
samsung/data_management_server_firmware 2.0.0 - 2.3.13.1
Published Jul 29, 2025
Tracked Since Feb 18, 2026