Samsung Server Snafu: MagicINFO 9 Vulnerability Joins CISA’s Naughty List
CISA has added a Samsung MagicINFO 9 Server flaw to its catalog, giving hackers a new playground with a CVSS score of 9.8. Now, attackers can write arbitrary files as system authority. Federal agencies have until June 12, 2025, to fix this vulnerability.
Hot Take:
Oh, Samsung MagicINFO 9 Server, you had one job—to keep your directory nice and restricted. But instead, you’re handing out file-writing privileges like they’re party favors at a cyber-criminal convention. Someone tell CISA they’ve got a new headliner for their Vulnerabilities Catalog tour!
Key Points:
- CISA adds Samsung MagicINFO 9 Server vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.
- The vulnerability (CVE-2025-4632) has a CVSS score of 9.8, signaling a critical severity level.
- The flaw allows attackers to write arbitrary files as system authority, potentially compromising systems.
- Federal agencies must patch this and other vulnerabilities by June 12, 2025, per CISA’s directive.
- Other recent additions to the KEV catalog include vulnerabilities in Ivanti EPMM, MDaemon Email Server, and more.
Already a member? Log in here