Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request.
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:CSamsung Security Manager
APPSamsung≤ 1.30
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
Related vulnerabilities
CVE-2015-1499HIGH8.5same product
The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary ...
CVE-2025-4632CRITICAL9.8⚠ KEVPL ✓same vendor
Path Traversal w Samsung MagicINFO 9 Server — zapis plików jako SYSTEM
CVE-2026-28573CRITICAL10.0PL ✓same vendor
Android/Wear OS: Trwały DoS przez brak weryfikacji uprawnień w AndroidManifest.xml
CVE-2025-52909CRITICAL9.8PL ✓same vendor
Buffer overflow w sterowniku Wi-Fi Samsung Exynos przez NL80211
CVE-2025-52908CRITICAL9.8PL ✓same vendor
Buffer overflow w sterowniku Wi-Fi Samsung Exynos przez błędną obsługę NL80211