ICSA-25-210-02

icsaUScisa_csaf_ot

Samsung HVAC DMS

view advisory published 2025-07-29

Successful exploitation of these vulnerabilities can lead to unauthenticated remote code execution.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2025-53082UScritical9.1—
An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restrict…
CVE-2025-53081UScritical9.1—
An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted…
CVE-2025-53080USmedium6.5—
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in un…
CVE-2025-53079US——
Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files
CVE-2025-53078UScritical9.8—
Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system
CVE-2025-53077US——
An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationSamsung HVAC DMS

    Samsung recommends users to contact a Samsung call center or installer for a software update.

  • MitigationSamsung HVAC DMS

    Samsung recommends users to contact a Samsung call center or installer for a software update.

  • MitigationSamsung HVAC DMS

    Samsung recommends users to contact a Samsung call center or installer for a software update.

  • MitigationSamsung HVAC DMS

    Samsung recommends users to contact a Samsung call center or installer for a software update.

  • MitigationSamsung HVAC DMS

    Samsung recommends users to contact a Samsung call center or installer for a software update.

  • MitigationSamsung HVAC DMS

    Samsung recommends users to contact a Samsung call center or installer for a software update.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan