CVE-2025-4186: Wangshen Secgate 3600

Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown function of the file /?g=route_ispinfo_export_save. The manipulation of the argument file_name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Wangshen Secgate 3600: version 2024 only

Published 2025-05-02. Last modified 2026-06-17.