CVE-2025-36598

Summary

Dell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to upload malicious files.

Affected Software

VendorProductVersion RangeStatus
DellAvamar Virtual Edition19.8 through 19.12 < 9.12 with CHF 338905 or lateraffected
DellPowerProtect DP Series Appliance (IDPA)N/A < 2.7.9 with AV CHF 338905affected

Weaknesses

  • CWE-22: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References