--- title: Samsung Fixes Critical Vulnerability in MagicINFO 9 Server description: Samsung MagicINFO Server 9 is affected by a high-severity vulnerability, CVE-2025-4632, allowing unauthorized access and arbitrary file writing. Exploited by... canonical: https://daily.dev/posts/samsung-fixes-critical-vulnerability-in-magicinfo-9-server-ikzwpauln twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Samsung Fixes Critical Vulnerability in MagicINFO 9 Server | daily.dev og:description: Samsung MagicINFO Server 9 is affected by a high-severity vulnerability, CVE-2025-4632, allowing unauthorized access and arbitrary file writing. Exploited by... og:url: https://daily.dev/posts/samsung-fixes-critical-vulnerability-in-magicinfo-9-server-ikzwpauln og:image: https://api.daily.dev/og/posts/ikZWPaUln.png og:image:alt: Samsung Fixes Critical Vulnerability in MagicINFO 9 Server og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Samsung Fixes Critical Vulnerability in MagicINFO 9 Server **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary Samsung MagicINFO Server 9 is affected by a high-severity vulnerability, CVE-2025-4632, allowing unauthorized access and arbitrary file writing. Exploited by attackers, this flaw facilitates path traversal and aids in deploying the Mirai botnet. Samsung promptly released a hotfix, version 21.1052, and users are urged to update immediately to mitigate risks. It is also advised to remove MagicINFO 9 Server from public internet exposure to enhance security. ## Content # Overview Samsung MagicINFO Server 9 has recently come under scrutiny due to a critical vulnerability, CVE-2025-4632. This flaw permits unauthorized access and arbitrary file writing, which enables threat actors to potentially execute remote code. # Vulnerability Details The CVE-2025-4632 vulnerability in MagicINFO 9 Server is considered a high-severity, zero-day vulnerability. It notably facilitates path traversal, which attackers have been exploiting to deploy the Mirai botnet among other threats. It also serves as a bypass for a previously addressed vulnerability, CVE-2024-7399. # Security Measures Samsung has responded by releasing a hotfix, specifically version 21.1052, to address this vulnerability. This update is essential, as it patches the existing exploit that can bypass previous security fixes. Users who are currently operating on version 21.1050 must upgrade immediately to prevent unauthorized intrusion and potential malware deployment. # Recommendations Security researchers strongly urge users to perform the necessary upgrades to version 21.1052 swiftly. Additionally, instances of MagicINFO 9 Server should be removed from public exposure on the Internet to enhance security and reduce the risk of exploitation. # Conclusion In response to several reported incidents and the active exploitation by attackers, the prompt update to version 21.1052 cannot be overstated. It is vital for organizations utilizing MagicINFO Server 9 to secure their systems by following these recommendations to protect against current and future threats. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#tech-news](https://daily.dev/tags/tech-news), [#security](https://daily.dev/tags/security), [#cloud](https://daily.dev/tags/cloud), [#cyber](https://daily.dev/tags/cyber), [#vulnerability](https://daily.dev/tags/vulnerability) [View this post on daily.dev](https://daily.dev/posts/samsung-fixes-critical-vulnerability-in-magicinfo-9-server-ikzwpauln) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Samsung Fixes Critical Vulnerability in MagicINFO 9 Server","url":"https://daily.dev/posts/samsung-fixes-critical-vulnerability-in-magicinfo-9-server-ikzwpauln","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/samsung-fixes-critical-vulnerability-in-magicinfo-9-server-ikzwpauln"},"datePublished":"2025-05-14T20:40:22.346Z","dateModified":"2025-05-15T19:31:59.744Z","description":"Samsung MagicINFO Server 9 is affected by a high-severity vulnerability, CVE-2025-4632, allowing unauthorized access and arbitrary file writing. Exploited by...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7a917df911432ce3a08e6649c0d2b1fa?_a=AQAEuj9","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7a917df911432ce3a08e6649c0d2b1fa?_a=AQAEuj9","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/samsung-fixes-critical-vulnerability-in-magicinfo-9-server-ikzwpauln","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"tech-news,security,cloud,cyber,vulnerability","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Samsung Fixes Critical Vulnerability in MagicINFO 9 Server"}]} ```