Samsung

Companies running Samsung MagicINFO, a platform for managing content on Samsung commercial digital displays, should upgrade to the latest available version of its v9 branch to fix a vulnerability that’s reportedly being exploited by attackers. The vulnerability in question was believed to be CVE-2024-7399, which was fixed in August 2024. However, confusion arose due to inconsistent information from Samsung. The latest hotfix, MagicINFO 9 Server (Hotfix) 21.1052, mitigates the issue. There is no hotfix for MagicINFO v8, so users should switch to v9 and do it in a particular way: first upgrade to v9 21.1050, and then update to v9 (Hotfix) 21.1052. All customers should investigate whether their instances have been compromised.

Source: https://www.helpnetsecurity.com/2025/05/15/samsung-patches-magicinfo-9-server-vulnerability-exploited-by-attackers/

TPRM report: https://scoringcyber.rankiteo.com/company/samsung-electronics

"id": "sam732051525",
"linkid": "samsung-electronics",
"type": "Vulnerability",
"date": "5/2025",
"severity": "25",
"impact": "",
"explanation": "Attack without any consequences: Attack in which data is not compromised"