CVE-2025-53082

MEDIUM

Samsung Data Management Server Firmware < 2.3.13.1 - Path Traversal

Title source: rule
STIX 2.1

Description

An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

References (1)

Scores

CVSS v3 6.1
EPSS 0.0060
EPSS Percentile 69.6%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-23
Status published
Products (1)
samsung/data_management_server_firmware 2.0.0 - 2.3.13.1
Published Jul 29, 2025
Tracked Since Feb 18, 2026