What’s Vulnerable › Vulnerabilities

CVE-2018-25312: LifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-29 · updated 2026-06-17
• Weakness: CWE-22

Description

LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating path parameters in the smartgui interface. Attackers can exploit the upload endpoint with directory traversal sequences to write files to arbitrary locations on the system, enabling remote code execution.

Affected products

• LifeSize ClearSea: 3.1.4

References

• https://www.exploit-db.com/exploits/44390
• https://www.vulncheck.com/advisories/lifesize-clearsea-directory-traversal-remote-code-execution

Get alerted when CVE-2018-25312 or the next vulnerability affects your stack