High · 8.2 CVE-2025-54445 EUVD-2025-22431GHSA-pfr4-5hm6-gjrq

Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Fo…

Published Jul 23, 2025 · Updated Jul 23, 2025 · Assigned by samsung.tv_appliance

Vendor: Samsung Electronics Product: MagicINFO 9 Server

Description

Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0.

Affected products

Vendor	Product	Affected	Fixed
Samsung Electronics	MagicINFO 9 Server	21.1080.0	—

References

https://security.samsungtv.com/securityUpdates