What’s Vulnerable › Vulnerabilities

CVE-2025-4186: Wangshen SecGate 3600 g=route_ispinfo_export_save path traversal

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-02 · updated 2026-06-17
• Weakness: CWE-22

Description

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown function of the file /?g=route_ispinfo_export_save. The manipulation of the argument file_name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Wangshen SecGate 3600: 2024

References

• https://flowus.cn/share/0f982f99-ecd5-4e35-88f0-c27093743385?code=G8A6P3
• https://vuldb.com/?ctiid.306804
• https://vuldb.com/?id.306804
• https://vuldb.com/?submit.561814

Get alerted when CVE-2025-4186 or the next vulnerability affects your stack