Description
A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=log_export_file. The manipulation of the argument file_name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wangshen | SecGate 3600 | 2400 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Wangshen SecGate 3600 Path Traversal Vulnerability http/cves/2025/CVE-2025-4078.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- VDB-306515 | Wangshen SecGate 3600 g=log_export_file path traversal vdb-entry technical-description
- VDB-306515 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #560540 | Wangshen SecGate 3600 affected at 2024 Path Traversal third-party-advisory
- https://flowus.cn/share/f5c70c53-737b-470b-aa2e-6d5524f849fb?code=G8A6P3 exploit