7.2
High
CVE-2025-40898 A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient…
Description
A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the input file. An authenticated user with limited privileges, by uploading a specifically-crafted Arc data archive, can potentially write arbitrary files in arbitrary paths, altering the device configuration and/or affecting its availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardian 25.5 | earliest → < 25.5.0 | 25.5.0 |
| CMC 25.5 | earliest → < 25.5.0 | 25.5.0 |
| RUGGEDCOM APE1808 | Versions not published |
References
- security.nozominetworks.com security.nozominetworks.com
Timeline
- Published
- Last modified
Other CVEs of Guardian
The 53 CVEs of Guardian →
CVE-2026-33924
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient…
7.5
High
CVE-2026-33923
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent…
7.5
High
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to…
5.1
Medium
CVE-2026-33391
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient…
5.3
Medium