Companies running Samsung MagicINFO, a platform for managing content on Samsung commercial digital displays, should upgrade to the latest available version of its v9 branch to fix a vulnerability that’s reportedly being exploited by attackers. The vulnerability in question was believed to be CVE-2024-7399, which was fixed in August 2024. However, confusion arose due to inconsistent information from Samsung. The latest hotfix, MagicINFO 9 Server (Hotfix) 21.1052, mitigates the issue. There is no hotfix for MagicINFO v8, so users should switch to v9 and do it in a particular way: first upgrade to v9 21.1050, and then update to v9 (Hotfix) 21.1052. All customers should investigate whether their instances have been compromised.
TPRM report: https://scoringcyber.rankiteo.com/company/samsung-electronics
"id": "sam732051525",
"linkid": "samsung-electronics",
"type": "Vulnerability",
"date": "5/2025",
"severity": "25",
"impact": "",
"explanation": "Attack without any consequences: Attack in which data is not compromised"
{'affected_entities': [{'industry': 'Technology',
'name': 'Samsung',
'type': 'Company'}],
'date_resolved': 'August 2024',
'description': 'Companies running Samsung MagicINFO, a platform for managing '
'content on Samsung commercial digital displays, should '
'upgrade to the latest available version of its v9 branch to '
'fix a vulnerability that’s reportedly being exploited by '
'attackers. The vulnerability in question was believed to be '
'CVE-2024-7399, which was fixed in August 2024. However, '
'confusion arose due to inconsistent information from Samsung. '
'The latest hotfix, MagicINFO 9 Server (Hotfix) 21.1052, '
'mitigates the issue. There is no hotfix for MagicINFO v8, so '
'users should switch to v9 and do it in a particular way: '
'first upgrade to v9 21.1050, and then update to v9 (Hotfix) '
'21.1052. All customers should investigate whether their '
'instances have been compromised.',
'impact': {'systems_affected': 'Samsung MagicINFO'},
'recommendations': ['Upgrade to the latest available version of MagicINFO v9 '
'branch'],
'response': {'communication_strategy': ['All customers should investigate '
'whether their instances have been '
'compromised'],
'remediation_measures': ['Upgrade to MagicINFO v9 21.1050',
'Update to MagicINFO v9 (Hotfix) '
'21.1052']},
'title': 'Samsung MagicINFO Vulnerability Exploitation',
'type': 'Vulnerability Exploitation',
'vulnerability_exploited': 'CVE-2024-7399'}