Orta CVSS 5.3
CVE-2025-40605: Email Security Appliance 5000 Firmware: güvenlik açığı
Açıklama (NVD)
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.
Özet bilgiler
- Ürün
- Sonicwall Email Security Appliance 5000 Firmware
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,36 (yüzdelik 30)
- CWE
- CWE-23
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sonicwall-email-security-appliance-5000-firmware | — | 10.0.33.8195 | — |
| sonicwall-email-security-appliance-5050-firmware | — | 10.0.33.8195 | — |
| sonicwall-email-security-appliance-7000-firmware | — | 10.0.33.8195 | — |
| sonicwall-email-security-appliance-7050-firmware | — | 10.0.33.8195 | — |
| sonicwall-email-security-appliance-9000-firmware | — | 10.0.33.8195 | — |