Wangshen SecGate 3600 2400 Path Traversal Vulnerability in Log Export Function

A path traversal vulnerability has been identified in Wangshen SecGate 3600 2400. The issue arises from the file processing of the log export feature, specifically the file_name argument. This vulnerability can be exploited remotely, allowing attackers to manipulate the file_name parameter to traverse directories and potentially access unauthorized files.

Impact

Exploitation of this vulnerability allows for path traversal, enabling attackers to access files outside the intended directory.