The Samsung Magician is a software tool for managing SSDs, memory sticks and cards from the manufacturer. A new update fixes a vulnerability in this utility.

Samsung's software for managing internal and external SSDs, USB flash drives and memory cards has a security flaw that the manufacturer warns about. An updated version is available for download, which users should definitely install.

This is due to inadequate rights control when using a so-called named pipe in Samsung's Magician PC software for Windows. This allows local users to access higher privileged data without authorization (CVE-2024-23769, CVSS 7.3, risk high). A pipe is a way of interprocess communication to exchange information and data.

New version 8.0.1

The bug affects Samsung Magician for Windows version 8.0.0. According to Samsung's security announcement, the vulnerability was reported at the end of October 2023 and patched with Magician software 8.0.1. It is available for download here or from Samsung's Support Tools page.

The software is likely to be widely used. Anyone who has examined or updated a Samsung SSD or other storage media from the manufacturer with the software in the past could still have a vulnerable software version lying dormant on the hard drive. Since the developers classify the vulnerability as a high risk, Windows users of the Samsung Magician software should quickly download and install the updated version. It is used, for example, to update the firmware of SSD drives.