7.2
Élevée
CVE-2025-40898 A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient…
Description
A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the input file. An authenticated user with limited privileges, by uploading a specifically-crafted Arc data archive, can potentially write arbitrary files in arbitrary paths, altering the device configuration and/or affecting its availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Guardian 25.5 | premières → < 25.5.0 | 25.5.0 |
| CMC 25.5 | premières → < 25.5.0 | 25.5.0 |
| RUGGEDCOM APE1808 | Versions non publiées |
Références
- security.nozominetworks.com security.nozominetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Guardian
Les 53 CVE de Guardian →
CVE-2026-33924
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient…
7.5
Élevée
CVE-2026-33923
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent…
7.5
Élevée
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to…
5.1
Moyenne
CVE-2026-33391
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient…
5.3
Moyenne