CVE-2025-54451
Published: 23 July 2025
Summary
CVE-2025-54451 is a critical-severity Code Injection (CWE-94) vulnerability in Samsung Magicinfo 9 Server. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 29.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly mitigates code injection by validating and sanitizing untrusted inputs to prevent malicious code execution in MagicINFO Server.
Ensures timely patching of the specific code injection flaw in MagicINFO 9 Server versions less than 21.1080.0.
Verifies software and information integrity to detect unauthorized code modifications resulting from successful injection.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote unauthenticated code injection in a public-facing server application directly enables T1190 for initial access and arbitrary code execution leading to full compromise.
NVD Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
Deeper analysisAI
CVE-2025-54451 is an Improper Control of Generation of Code ('Code Injection') vulnerability, classified under CWE-94, in Samsung Electronics MagicINFO 9 Server. This issue affects versions less than 21.1080.0 and was published on 2025-07-23. The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), marking it as critical due to its potential for severe impact.
Unauthenticated remote attackers can exploit this vulnerability over the network with low attack complexity and no user interaction required. Successful code injection enables high-impact consequences, including unauthorized access to sensitive data, modification of system behavior, and disruption of service, potentially resulting in full server compromise.
Samsung's security advisory provides further details on mitigation and patches at https://security.samsungtv.com/securityUpdates.
Details
- CWE(s)