CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-40629: Path Traversal vulnerability in PNETLab
8.7
CVSS
Description
PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requests. Specifically, the application is vulnerable to requests that access sensitive files outside the intended directory.
Classification
CVE ID: CVE-2025-40629
CVSS Base Severity: HIGH
CVSS Base Score: 8.7
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products
Vendor: PNETLab
Product: PNETLab
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.29% (probability of being exploited)
EPSS Percentile: 52.0% (scored less or equal to compared to others)
EPSS Date: 2025-06-14 (when was this score calculated)
Stakeholder-Specific Vulnerability Categorization (SSVC)
SSVC Exploitation: none
SSVC Technical Impact: partial
SSVC Automatable: true
References
https://nvd.nist.gov/vuln/detail/CVE-2025-40629https://www.incibe.es/en/incibe-cert/notices/aviso/path-traversal-vulnerability-pnetlab