Description
An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Electronics | Data Management Server | 2.0.0 – < 2.3.13.1, 2.5.0.17 – < 2.6.14.1, 2.7.0.15 – < 2.9.3.6 | 2.3.13.1 |
Advisories 1
- ICSA-25-210-02 Samsung HVAC DMS CISA ICS & IT advisories · Jul 29, 2025