What’s Vulnerable › Vulnerabilities
CVE-2025-53081
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-29 · updated 2026-06-17
- Weakness: CWE-22
Description
An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
Affected products
- Samsung Electronics Data Management Server: from 2.0.0 before 2.3.13.1; from 2.5.0.17 before 2.6.14.1; from 2.7.0.15 before 2.9.3.6 — fixed in 2.3.13.1, 2.6.14.1, 2.9.3.6
How to fix
Upgrade to a fixed version: Samsung Electronics Data Management Server 2.3.13.1, 2.6.14.1, 2.9.3.6. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-53081 or the next vulnerability affects your stack