Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations on the filesystem
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Electronics | Data Management Server | 2.0.0 – < 2.3.13.1, 2.5.0.17 – < 2.6.14.1, 2.7.0.15 – < 2.9.3.6 | 2.3.13.1 |
Advisories 1
- ICSA-25-210-02 Samsung HVAC DMS CISA ICS & IT advisories · Jul 29, 2025