The vulnerability of Wangshen SecGate 3600 lies in the incorrect restriction of the path name to the restricted access catalog, allowing attackers to bypass existing security restrictions.

The vulnerability of Wangshen SecGate 3600 relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

EUVD-2024-32031

Malicious code in bioql PyPI...

EUVD-2024-46315

Malicious code in bioql PyPI...

CVE-2025-4186 Wangshen SecGate 3600 g=route_ispinfo_export_save path traversal

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown function of the file /?g=routeispinfoexportsave. The manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4186: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown function of the file /?g=routeispinfoexportsave. The manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4185: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as critical, has been found in Wangshen SecGate 3600 2024. This issue affects some unknown processing of the file ?g=objareaexportsave. The manipulation of the argument filename leads to path traversal. The attack may be initiated remotely. The exploit has be...

PT-2025-18728 · Wangshen · Wangshen Secgate 3600

Name of the Vulnerable Software and Affected Versions: Wangshen SecGate 3600 version 2024 Description: A critical vulnerability was found in Wangshen SecGate 3600. The issue affects an unknown function of the file /?g=route ispinfo export save. The manipulation of the file name argument leads to...

Wangshen SecGate 路径遍历漏洞

Wangshen SecGate is a series of gigabit firewalls from China's Wangshen. A path traversal vulnerability exists in the Wangshen SecGate 3600, which stems from path traversal due to incorrect operation of the parameter filename in the file /?g=routeispinfoexportsave...

CVE-2025-4185 Wangshen SecGate 3600 g=obj_area_export_save path traversal

A vulnerability, which was classified as critical, has been found in Wangshen SecGate 3600 2024. This issue affects some unknown processing of the file ?g=objareaexportsave. The manipulation of the argument filename leads to path traversal. The attack may be initiated remotely. The exploit has be...

PT-2025-18726 · Wangshen · Wangshen Secgate 3600

Name of the Vulnerable Software and Affected Versions: Wangshen SecGate 3600 version 2024 Description: A critical vulnerability has been found in Wangshen SecGate 3600, affecting the processing of the file ?g=obj area export save. The manipulation of the argument file name leads to path traversal...

CVE-2025-4078: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=logexportfile. The manipulation of the argument filename leads to path traversal. The attack may be initiated remotely. The exploit has bee...

CVE-2024-5050

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 up to 20240516. This affects an unknown part of the file /?g=logimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The associated...

CVE-2024-5050 Wangshen SecGate 3600 ?g=log_import_save unrestricted upload

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 up to 20240516. This affects an unknown part of the file /?g=logimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The associated...

CVE-2024-5050 Wangshen SecGate 3600 ?g=log_import_save unrestricted upload

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 up to 20240516. This affects an unknown part of the file /?g=logimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The associated...

CVE-2024-5050

CVE-2024-5050 affects Wangshen SecGate 3600 (up to 20240516). The vulnerability is associated with the request parameter (reqfile) in the endpoint "/?g=log_import_save" which allows manipulation leading to unrestricted file upload. This could enable a remote attacker to upload arbitrary files, as...

PT-2024-34277

Name of the Vulnerable Software and Affected Versions: Wangshen SecGate 3600 versions up to 20240516 Description: A critical issue was found, affecting an unknown part of the file /?g=log import save. The manipulation of the reqfile argument leads to unrestricted upload. This issue can be initiat...

CVE-2024-5050: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 up to 20240516. This affects an unknown part of the file /?g=logimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The associated...

CVE-2024-3444

A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an unknown part of the file /?g=netprokeywordimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The...

CVE-2024-3444 Wangshen SecGate 3600 ?g=net_pro_keyword_import_save unrestricted upload

A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an unknown part of the file /?g=netprokeywordimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The...

CVE-2024-3444

The CVE-2024-3444 issue affects Wangshen SecGate 3600 up to 20240408. The vulnerability resides in an upload endpoint parameter, specifically the file path parameter /?g=net_pro_keyword_import_save with the reqfile argument, where manipulation leads to unrestricted file upload. It is exploitable ...