Rapid Response: Samsung MagicINFO 9 Server Flaw

Huntress and SSD Disclosure report that Samsung MagicINFO 9 Server (versions 21.1050.0 and 21.1040.2) is vulnerable to an unauthenticated file-upload leading to remote code execution; a public PoC exists and active exploitation — including Mirai botnet activity — has been observed, so affected servers should not be internet-facing until a proper patch is released.