CVE-2025-4632 CISA KEV · Actively exploited
Samsung MagicINFO 9 Server Path Traversal Vulnerability
CVSS score
—
EPSS probability
%24.1
Risk score
—
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution (RCE) vulnerability in Samsung MagicINFO 9 Server (versions prior to 21.1052).
Makefile Go / Python
MantisToboggan-git/CVE-2025-4632-POC
Makefile Go / Python
Nuclei: Samsung MagicINFO 9 Server - File Upload & Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
8.8
CVE-2024-7399 Actively exploitedPath traversal in Samsung Electronics MagicINFO 9 Server
Workaround Public Exploits:1EPSS %92
8.8
8.8
6.5
10.0
CVE-2025-54328Vulnerability in Samsung Exynos 980
Patch status unknown Public Exploits:1EPSS %1
8.1
CVE-2025-21079Vulnerability in Samsung Members
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-4632"