CVE-2025-53077

CWE-6983 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 69.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Samsung Electronics Dms(data Management Server)Samsung Data Management Server Firmware
Timeline
PublishedJul 29

Description

An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 3.9 | Impact: 2.5

Affected Packages2 packages

▶CVEListV5samsung_electronics/dms(data_management_server)2.0.0 — 2.3.13.1+2
▶NVDsamsung/data_management2.0.0 — 2.3.13.1+2

🔴Vulnerability Details

2
GHSA
GHSA-qcvr-pq9v-99vc: An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions↗2025-07-29
▶
CVEList
CVE-2025-53077: An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions↗2025-07-29
▶
CVE-2025-53077 (MEDIUM CVSS 6.5) | An execution after redirect in Sams | cvebase.io