CVE-2026-25203
Local Privilege Escalation via Default Permissions in Samsung MagicINFO
Publication date: 2026-04-10
Last updated on: 2026-04-10
Assigner: Samsung TV & Appliance
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | magicinfo_9_server | to 21.1091.1 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-276 | During installation, installed file permissions are set to allow anyone to modify those files. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a local privilege escalation issue in Samsung MagicINFO 9 Server versions prior to 21.1091.1. It arises due to incorrect default permissions set on the server, which can allow a local attacker with limited privileges to gain higher-level access.
How can this vulnerability impact me? :
Exploiting this vulnerability can allow an attacker with local access to escalate their privileges, potentially gaining full control over the affected MagicINFO 9 Server. This can lead to unauthorized access, modification, or disruption of the server's operations.