Description
An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Electronics | Data Management Server | 2.0.0 – < 2.3.13.1, 2.5.0.17 – < 2.6.14.1, 2.7.0.15 – < 2.9.3.6 | 2.3.13.1 |
Advisories 1
- ICSA-25-210-02 Samsung HVAC DMS CISA ICS & IT advisories · Jul 29, 2025