Approved changes feed: RSS · Atom

cpe:2.3:a:samsung:magicinfo_9_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSamsung (0eb241f7-997b-5d1c-b2a3-00a89e1049d3)
ProductMagicinfo 9 Server (53c036fe-d635-513c-ae39-a50e59b7c75d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25202 vulnerable 2026-06-08 07:53:19.498603 Details available
CRITICAL (9.8)
The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.
Published: 2026-02-02T04:49:53.680Z
Updated: 2026-02-26T15:04:39.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25201 vulnerable 2026-06-08 07:53:19.498285 Details available
HIGH (8.8)
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.
Published: 2026-02-02T04:49:38.016Z
Updated: 2026-02-26T15:04:40.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25200 vulnerable 2026-06-08 07:53:19.497744 Details available
CRITICAL (9.8)
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.
Published: 2026-02-02T04:49:13.086Z
Updated: 2026-02-26T15:04:40.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54455 vulnerable 2026-06-08 07:33:12.605027 Details available
CRITICAL (9.1)
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.
Published: 2025-07-23T05:27:10.678Z
Updated: 2026-02-26T17:50:21.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54454 vulnerable 2026-06-08 07:33:12.604772 Details available
CRITICAL (9.1)
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.
Published: 2025-07-23T05:26:17.961Z
Updated: 2026-02-26T17:50:21.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54453 vulnerable 2026-06-08 07:33:12.604514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54452 vulnerable 2026-06-08 07:33:12.604249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54451 vulnerable 2026-06-08 07:33:12.603988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54450 vulnerable 2026-06-08 07:33:12.603742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54449 vulnerable 2026-06-08 07:33:12.603375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54448 vulnerable 2026-06-08 07:33:12.602994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54447 vulnerable 2026-06-08 07:33:12.602739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54446 vulnerable 2026-06-08 07:33:12.602479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54445 vulnerable 2026-06-08 07:33:12.602215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54444 vulnerable 2026-06-08 07:33:12.601747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54443 vulnerable 2026-06-08 07:33:12.601246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54442 vulnerable 2026-06-08 07:33:12.600867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54441 vulnerable 2026-06-08 07:33:12.600394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54440 vulnerable 2026-06-08 07:33:12.600103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54439 vulnerable 2026-06-08 07:33:12.599664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54438 vulnerable 2026-06-08 07:33:12.599273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4632 vulnerable 2026-06-08 07:29:16.775217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7399 vulnerable 2026-06-08 06:58:22.086137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.