Path Traversal Vulnerability in Wangshen SecGate 3600 Product

CVE-2025-4185

Summary

A vulnerability affecting the Wangshen SecGate 3600 product has been identified, where improper handling of a specific processing parameter, ?g=obj_area_export_save, could allow attackers to exploit path traversal. This improper validation of the file_name argument enables unauthorized access to the file system, potentially allowing malicious actors to read or manipulate sensitive files on the server. The exploitation can be conducted remotely, heightening the security risk as this vulnerability has already been disclosed publicly.

References