Samsung DMS Arbitrary File Creation Vulnerability
Vulnerability
A vulnerability allowing arbitrary file creation has been identified in Samsung Data Management Server (DMS) versions 2.9.3.5 to 2.7.0.15, 2.6.14.0 to 2.5.0.17, and 2.3.13.0 to 2.0.0. This vulnerability allows attackers to create files in unintended locations on the filesystem. Exploitation is limited to specific authorized private IP addresses.
Impact
Exploitation of this vulnerability allows for arbitrary file creation, which could be used to manipulate or disrupt the normal functioning of the system by placing files in critical areas of the filesystem.
Remediation
The official patch for this vulnerability has been released and can be applied to affected DMS versions.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.