CNNVD-202507-700 Information
Jul 07, 2025
cve
CNNVD ID
CNNVD-202507-700
Related CVE
- CNNVD Published: 2025-07-07
Description (Chinese)
Marvell QConvergeConsole是美国Marvell公司的一款跨数据中心的统一适配器管理软件。 Marvell QConvergeConsole存在路径遍历漏洞，该漏洞源于compressFirmwareDumpFiles方法未正确验证用户提供路径，可能导致信息泄露。
Description (English)
Marvell QConvergeConsole is a United States-based multi-data centre integrated adapter management software. Marvell QConvergeConsole has a loophole in its path, which stems from the failure of the user to correctly verify the path provided by the company Firmware DunpFiles method, which may lead to the disclosure of information.
Hazard Level
Medium
Vulnerability Type
路径遍历
Affected Vendor
Marwal Infotech
Published
2025-07-07
Last Modified
2026-02-24
References
https://www.zerodayinitiative.com/advisories/ZDI-25-453/
Share on: