Path Traversal Vulnerability in Wangshen SecGate 3600 Product
CVE-2025-4185
5.3MEDIUM
Key Information:
- Vendor
Wangshen
- Status
- Vendor
- CVE Published:
- 2 May 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-4185?
A vulnerability affecting the Wangshen SecGate 3600 product has been identified, where improper handling of a specific processing parameter, ?g=obj_area_export_save, could allow attackers to exploit path traversal. This improper validation of the file_name argument enables unauthorized access to the file system, potentially allowing malicious actors to read or manipulate sensitive files on the server. The exploitation can be conducted remotely, heightening the security risk as this vulnerability has already been disclosed publicly.
Affected Version(s)
SecGate 3600 2024
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.