Actively exploited · Published Aug 9, 2024 · Assigned by samsung.tv_appliance
CVE-2024-7399
High 8.8 Exploited
In plain English
A high-severity path traversal in MagicINFO 9 Server from Samsung Electronics. Attackers are actively exploiting it in the wild (listed by CISA on April 24, 2026). The chance it is exploited in the next 30 days is estimated at 91.9% (higher than 99.8% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by May 8, 2026.
Official description
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Samsung Electronics | MagicINFO 9 Server | 0 – before 21.1050 |
Weakness: CWE-22, CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://security.samsungtv.com/securityUpdates vendor-advisory
- https://arcticwolf.com/resources/blog-uk/arctic-wolf-observes-exploitation-of-path-traversal-vulnerability-in-samsung-magicinfo-9-server-cve-2024-7399/ third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7399 government-resource