What is the CVSS score of CVE-2019-25333?

CVE-2019-25333 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.5%.

Which versions of AWS are affected by CVE-2019-25333?

Bullwark Momentum Series JAWS 1.0 devices are vulnerable to unauthenticated directory traversal attacks that could expose sensitive system files and configuration data.

Is there a public PoC exploit available for CVE-2019-25333?

Yes, a public proof-of-concept exploit is available for CVE-2019-25333. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2019-25333?

Within 24 hours: Inventory all Bullwark JAWS 1.0 devices in your environment and isolate affected systems from untrusted networks. Within 7 days: Implement network segmentation to restrict access to JAWS devices to authorized administrators only; deploy WAF rules to block directory traversal patterns (../, ..\ encoded variants); monitor access logs for exploitation attempts. Within 30 days: Contact Bullwark for patch availability; evaluate replacement or upgrade options; conduct forensic analysis of access logs to determine if systems were previously compromised.

AWS CVE-2019-25333

HIGH

Path Traversal (CWE-22)

2026-02-12 disclosure@vulncheck.com

Path Traversal AWS

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

PoC Detected

Feb 13, 2026 - 14:23 vuln.today

Public exploit code

CVE Published

Feb 12, 2026 - 23:16 nvd

HIGH 7.5

DescriptionCVE.org

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit the vulnerability by sending crafted GET requests with multiple '../' sequences to read sensitive files like /etc/passwd outside the web root directory.

AnalysisAI

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. [CVSS 7.5 HIGH]

Technical ContextAI

Classified as CWE-22 (Path Traversal). Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit the vulnerability by sending crafted GET requests with multiple '../' sequences to read sensitive files like /etc/passwd outside the web root directory.

Affected ProductsAI

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipul

RemediationAI

Monitor vendor advisories for a patch. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.