Samsung MagicINFO 9 Server Path Traversal File Write (CVE-2024-7399) | MSSP Advisory

CISA added CVE-2024-7399 to its Known Exploited Vulnerabilities catalog, targeting Samsung MagicINFO 9 Server with a path traversal flaw that grants system-level file write access. The vulnerability carries active exploitation risk despite the generous 2026 remediation deadline.

MagicINFO servers often sit in client networks managing digital signage and displays, creating backdoor access if compromised. Client environments running unpatched Samsung display infrastructure become liability exposure points where the MSSP failed to flag a government-confirmed active threat.