/Vulnerability Library

Wangshen SecGate 3600 Path Traversal Vulnerability

CVE-2025-4078
Verified

Description

Wangshen SecGate 3600 2400 contains a path traversal caused by manipulation of the 'file_name' argument in '?g=log_export_file', letting remote attackers access arbitrary files, exploit requires remote access.

Severity

Medium

Published Date

February 11, 2026

Template Author

ark

CVE-2025-4078.yaml
5.0Severity

CVSS Metrics

References

https://nvd.nist.gov/vuln/detail/CVE-2025-4078https://vuldb.com/?id.295954

Remediation Steps

Implement input validation and sanitize 'file_name' parameter; update to the latest firmware version if available.