Post

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. ssd-disclosure.com/ssd-advisory... The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!

CyberRaiju

@jaiminton.com

The version offered on their website via the download button is currently not even the latest, so even if it was patched (it isn't, the vulnerable class has not changed at all) anyone downloading the software is getting an outdated version! No updates here: security.samsungtv.com/securityUpda...

7/5/25, 7:08 am1 repost0 likes

CyberRaiju

@jaiminton.com

7 May 2025

We have reached out to Samsung. There is active exploitation in the wild. Be sure to look for new files created in the server directory of your MagicInfo install, and child processes spawning from the Apache Tomcat process.

CyberRaiju

@jaiminton.com

10 May 2025

Their latest version 52 fixes the issue, but you need to have 50 installed to install 52, this is not a standalone installer, just an update, and the old versions are still the default download on their website. eu.community.samsung.com/t5/samsung-s...