What is CVE-2024-7399?
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.
Timeline
- 2024-08-12Published to the U.S. National Vulnerability Database (NVD)
- 2026-04-24Added to the CISA Known Exploited Vulnerabilities (KEV) catalog
- 2026-05-08CISA federal remediation deadline (BOD 22-01)
- 2026-10-01NVD record last updated
CISA Known Exploited Vulnerability
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Affected product
Samsung MagicINFO 9 Server
Remediation Steps
- Apply Samsung MagicINFO security patches from vendor portal
- Verify server is running version 9.x with latest cumulative updates
- Implement network access controls restricting server management ports
- Audit administrative account activities for unauthorized access
- Enable enhanced logging and monitoring for content delivery operations
References
- https://security.samsungtv.com/securityUpdates
- https://arcticwolf.com/resources/blog-uk/arctic-wolf-observes-exploitation-of-path-traversal-vulnerability-in-samsung-magicinfo-9-server-cve-2024-7399/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7399
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.samsung.com/business/support
- https://nvd.nist.gov/vuln/detail/CVE-2024-7399
Referenced in our briefings & reports
- Vulnerability Priority Report – Week 4 of April 2026 (April 27 – May 3)
Related vulnerabilities
- CVE-2026-106173 (same weakness: CWE-22)
- CVE-2026-104286 – Fortinet FortiMail (same weakness: CWE-22)
- CVE-2026-93616 – Check Point Multiple Products (same weakness: CWE-22)
- CVE-2026-85706 – GitLab Community Edition And Enterprise Edition (same weakness: CWE-22)
- CVE-2026-66384 – JFrog Artifactory (same weakness: CWE-22)
- CVE-2026-59310 – Broadcom VMware VCenter (same weakness: CWE-22)
Browse all tracked CVEs in the defend.network CVE database →
🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.