{"id":"CVE-2024-7399","title":"Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attack","published":"2024-08-12T13:38:41.550Z","updated":"2026-10-01T19:17:15.393Z","severity":"critical","cvssScore":9.8,"epss":0.91941,"epssPct":0.99821,"kev":true,"maturity":"weaponized","actionScore":97,"primaryVendor":"samsung","primaryProduct":"magicinfo 9 server","cweId":"CWE-22","fixAvailable":false,"tags":["pre-auth","path-traversal","remote","no-ui"],"epssDelta7":0,"summary":"Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssVersion":"3.1","cvssSource":"nvd-primary","cweName":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","kevAdded":"2026-04-24T00:00:00.000Z","kevDue":"2026-05-08T00:00:00.000Z","kevRansomware":"Unknown","source":"nvd","cna":"samsung.tv_appliance","ssvc":{"exploitation":"active","automatable":"yes","impact":"total"},"sources":{"tr":"2026-10-01T11:24:25.940Z","adp":"2026-10-01T18:08:41.503Z","cna":"2026-10-01T18:08:41.503Z","nvd":"2026-10-01T19:17:15Z","epss":"2026-11-11","nuclei":"2026-11-13T03:18:10.620Z","cna_seen":"2026-09-29T11:11:21.145Z","github-poc":"2026-11-13T03:18:14.335Z","metasploit":"2026-11-13T03:18:09.107Z"},"cvssCna":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"hasPatchRef":false,"credits":[{"name":"Anonymous working with Trend Mirco Zero Day Initiative","kind":"reporter","org":null}],"counts":{"exploitdb":0,"metasploit":1,"nuclei":1,"githubPoc":1},"products":[{"vendor":"samsung","product":"magicinfo 9 server","cpe":"cpe:2.3:a:samsung:magicinfo_9_server"}],"references":[{"url":"https://security.samsungtv.com/securityUpdates","tags":"Vendor Advisory"},{"url":"https://arcticwolf.com/resources/blog-uk/arctic-wolf-observes-exploitation-of-path-traversal-vulnerability-in-samsung-magicinfo-9-server-cve-2024-7399/","tags":"Third Party Advisory"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7399","tags":"US Government Resource"}],"exploits":[{"source":"metasploit","kind":"exploit","date":"2025-04-30"},{"source":"nuclei","kind":"high","date":null},{"source":"github-poc","kind":"stars:0","date":"2025-05-30"}],"analysis":null,"affectedVersions":[{"vendor":"samsung","product":"magicinfo 9 server","version":"*","vsi":null,"vse":null,"vei":null,"vee":"21.1050.0"}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}