Samsung MagicINFO 9 Server Code Injection Vulnerability

A code injection vulnerability has been identified in Samsung Electronics MagicINFO 9 Server versions prior to 21.1080.0. This vulnerability allows for improper control over code generation, enabling attackers to inject and execute arbitrary code on the server.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected server.

Remediation

Users can check for the latest firmware updates through the Samsung Smart TV software update support policy, which guarantees updates for at least five years from the product launch. For MagicINFO 9 Server, security patches are being released as part of the Security Vulnerability Patch (SVP) program. The latest firmware can be downloaded from the Samsung website.