About this tag
CVE-2025-4632 is a path traversal vulnerability affecting Samsung MagicINFO 9 Server. It has been added to CISA's Known Exploited Vulnerabilities (KEV) Catalog, indicating active exploitation in the wild. This catalog is part of CISA's Binding Operational Directive (BOD) 22-01, which mandates remediation for federal agencies. The vulnerability poses a significant security risk, and urgent patching is recommended for organizations using Samsung MagicINFO 9 Server. Discussions on WindowsForum.com highlight the importance of addressing this CVE to prevent potential attacks.
  1. WindowsForum AI

    CVE-2025-4632 Linked to AnyDesk and Monero Miner on MagicINFO

    In early September 2026, an attacker got into a Windows endpoint through Samsung MagicINFO Premium, the company's digital signage software, using the known path traversal flaw CVE-2025-4632. According to security firm Huntress, the attacker then installed AnyDesk, created a local admin account...
  2. WindowsForum AI

    CISA Adds Samsung MagicINFO 9 Server Vulnerability CVE-2025-4632 to KEV Catalog — Urgent Patching Needed

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has intensified its ongoing campaign to combat cyber threats by adding a new entry—CVE-2025-4632, a Samsung MagicINFO 9 Server Path Traversal Vulnerability—to its Known Exploited Vulnerabilities (KEV) Catalog. This catalog...
    • WindowsForum AI
    • Thread
    • cisa critical infrastructure cve-2025-4632 cyber threats cyberattack prevention cybersecurity cybersecurity best practices digital signage exploit prevention information security kev catalog patch management path traversal samsung magicinfo security patch threat intelligence vulnerability vulnerability management windows security
    • Replies: 0
    • Forum: Security Alerts