Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-27937 EUVD-2025-12416GHSA-g9hr-8mwc-g7m7

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If …

Published Apr 27, 2025 · Updated Apr 28, 2025 · Assigned by jpcert

Description

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, an arbitrary file in the affected product may be obtained by a remote attacker who can log in to the product.

Affected products

VendorProductAffectedFixed
SIOS Technology Quick Agent V3 prior to Ver3.2.1 —
SIOS Technology Quick Agent V2 prior to Ver2.9.8 —

References