Unpatched Samsung flaw puts its digital signage at risk of becoming botnet zombies

A high-risk vulnerability in the Samsung Magicinfo server and is currently being actively exploited. Samsung advises to immediately install the current security patch to contain risks.

Since the beginning of May 2025, Arctic Wolf has observed an exploit of the CVE-2024-7399 vulnerability in Samsung "MagicINFO 9" . Server software is a content management system (CMS) used to manage and remotely control digital display systems. This serious security vulnerability was originally released by Samsung in August 2024 after it was reported by security researchers. [...] The post vulnerability in Samsung Magicinfo 9 server software fir…

Unpatched Samsung flaw puts its digital signage at risk of becoming botnet zombies

A remote code execution vulnerability in the Samsung MagicINFO 9 server has been left improperly patched, and it's already coming under attack by a variant of the Mirai botnet. Once a server is compromised through this vulnerability, it essentially becomes a botnet zombie, and could potentially be used to launch Distributed Denial of Service (DDoS) attacks or further spread malware. Samsung hasn't released a proper fix for this vulnerability y…