Samsung Data Management Server Firmware vulnerabilities
6 CVEs affecting Samsung Data Management Server Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-53082, published 2025-07-29.
More from Samsung.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2025-53082, published 2025-07-29. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific,…
- CVE-2025-53079, published 2025-07-29. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files
- CVE-2025-53081, published 2025-07-29. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific,…
- CVE-2025-53078, published 2025-07-29. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system
- CVE-2025-53080, published 2025-07-29. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations…
- CVE-2025-53077, published 2025-07-29. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by…