Samsung DMS Arbitrary File Deletion Vulnerability

A vulnerability allowing arbitrary file deletion has been identified in Samsung Data Management Server (DMS) versions 2.9.3.5 to 2.7.0.15, 2.6.14.0 to 2.5.0.17, and 2.3.13.0 to 2.0.0. This vulnerability allows attackers to delete files from unintended locations on the filesystem. Exploitation is limited to specific authorized private IP addresses.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of files from the filesystem, potentially leading to loss of data or disruption of services that rely on the deleted files.

Remediation

The official patch for this vulnerability has been released and is available for users to apply.