Path Traversal in Samsung Data_management_server
CVE-2025-53082
An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
EPSS: 0.004 (36.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.
Affected products
- Samsung Data_management_server
- Samsung Data_management_server_firmware
- Samsung Electronics Data Management Server — versions 2.0.0, 2.5.0.17, 2.7.0.15
Weakness classification (CWE)
References
- PSIRT@samsung.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-53082?
- CVE-2025-53082 is a medium-severity vulnerability in Samsung Data_management_server, classified under Relative Path Traversal. CVSS score: 6.1/10. Published 2025-07-29.
- How severe is CVE-2025-53082?
- Medium severity. CVSS v3 base score is 6.1 out of 10.