CVE-2025-12382

HIGH EPSS 36.0%
Published Nov 12, 20257mo ago · Modified Jun 17, 20261w ago
7.3 CVSS 4.0
High
Find Similar
Published Nov 12, 2025 7mo ago
Last Modified Jun 17, 2026 1w ago

Description

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).

CVSS Details

Base Score
7.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:X/RE:L/U:Amber
Attack Vector Adjacent
Attack Complexity Low
Privileges Required Low
User Interaction A
Scope N

Threat Intelligence

EPSS Exploit Probability
36.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 5

VendorProductVersionRange
algosecfirewall_analyzera33.0any
algosecfirewall_analyzera33.0any
algosecfirewall_analyzera33.10any
algosecfirewall_analyzera33.10any
linuxlinux_kernel*any

References 1

  • techdocs.algosec.com https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2025-12382.htm
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.