# Samsung MagicINFO Server has 18 vulnerabilities, including path traversal

- Date: 2025-07-23
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2025-54438, CVE-2025-54439, CVE-2025-54440, CVE-2025-54441, CVE-2025-54442, CVE-2025-54443, CVE-2025-54444, CVE-2025-54445, CVE-2025-54446, CVE-2025-54447, CVE-2025-54448, CVE-2025-54449, CVE-2025-54450, CVE-2025-54451, CVE-2025-54452, CVE-2025-54453, CVE-2025-54454, CVE-2025-54455
- Products: [MagicINFO](https://signagelist.org/products/magicinfo/)

NVD published 18 vulnerabilities in Samsung MagicINFO Server, covering path traversal, security flaw and authentication bypass. One path traversal flaw in MagicINFO 9 Server lets an attacker upload a web shell to a web server, and it affects versions below 21.1080.0.

## Sources

- [CVE-2025-54438](https://nvd.nist.gov/vuln/detail/CVE-2025-54438) (NIST NVD)
- [CVE-2025-54439](https://nvd.nist.gov/vuln/detail/CVE-2025-54439) (NIST NVD)
- [CVE-2025-54440](https://nvd.nist.gov/vuln/detail/CVE-2025-54440) (NIST NVD)
- [CVE-2025-54441](https://nvd.nist.gov/vuln/detail/CVE-2025-54441) (NIST NVD)
- [https://security.samsungtv.com/securityUpdates](https://security.samsungtv.com/securityUpdates)

Page: https://signagelist.org/incidents/2025-07-samsung-magicinfo-server-has-18-vulnerabilities-including/