CVE-2025-12382 — Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer

CVE-2025-12382

Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer PUBLISHED

Description (CNA)

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).

Affected (CNA)

Vendor / product	Versions
AlgoSec / Firewall Analyzer	affected A33.0 (up to build 320); affected A33.10 (up to build 210)

CWE

CWE-22

References

https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2025-12382.htm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.