CVE-2025-5740 - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path

Back Back to CVE browser

HIGH

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path

Published Jun 10, 2025

8.6

HIGH

CVSS 4.0

EPSS 0.75%

Description

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path.

Affected products

Vendor Schneider Electric Product EVLink WallBox Default
unaffected
- Version
  All Versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Schneider Electric

EVLink WallBox

unaffected

Version	Status	Constraints
All Versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

Link	Providers	Tags
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-03.pdf
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-17638		Advisory