Vulnerability · Published May 2, 2025 · Assigned by VulDB
CVE-2025-4186Wangshen SecGate 3600 g=route_ispinfo_export_save path traversal
Medium 6.3
In plain English
A medium-severity path traversal in SecGate 3600 from Wangshen. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.5%top 59.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown function of the file /?g=route_ispinfo_export_save. The manipulation of the argument file_name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Wangshen | SecGate 3600 | 2024 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-306804 | Wangshen SecGate 3600 g=route_ispinfo_export_save path traversal vdb-entry, technical-description
- VDB-306804 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #561814 | Wangshen SecGate 3600 affected at 2024 Path Traversal third-party-advisory
- https://flowus.cn/share/0f982f99-ecd5-4e35-88f0-c27093743385?code=G8A6P3 exploit