CVE-2025-4078 PoC — Wangshen SecGate 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4078.yaml

Associated Vulnerability

Title:Wangshen SecGate 路径遍历漏洞 (CVE-2025-4078)
Description:Wangshen SecGate是中国网神（Wangshen）公司的一系列千兆防火墙。 Wangshen SecGate 3600存在路径遍历漏洞，该漏洞源于文件?g=log_export_file中参数file_name处理不当，可能导致路径遍历攻击。

Description

Wangshen SecGate 3600 2400 contains a path traversal caused by manipulation of the 'file_name' argument in '?g=log_export_file', letting remote attackers access arbitrary files, exploit requires remote access.

File Snapshot


 id: CVE-2025-4078

info:
  name: Wangshen SecGate 3600 Path Traversal Vulnerability
  author: Ark
  

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!