CVE-2025-12381 — Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer

CVE-2025-12381

Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer PUBLISHED

Description (CNA)

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This issue affects Firewall Analyzer: A33.0, A33.10.

Affected (CNA)

Vendor / product	Versions
AlgoSec / Firewall Analyzer	affected A33.0 (up to build 320); affected A33.10 (up to build 220)

CWE

CWE-269

References

https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2025-12381.htm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.