CVE-2025-70819

Zettlab / D6 Ultra PUBLISHED

Description (CNA)

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.

Affected (CNA)

Vendor / product	Versions
Zettlab / D6 Ultra	affected 0 before 1.7.0

CWE

CWE-24

References

https://www.xda-developers.com/nas-wouldnt-give-ssh-access-hacked-into/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.