CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-40898
Severity
HIGH
CVSS
8.1
EPSS
0.35%
Original NVD Description
A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the input file. An authenticated user with limited privileges, by uploading a specifically-crafted Arc data archive, can potentially write arbitrary files in arbitrary paths, altering the device configuration and/or affecting its availability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)