What is the CVSS score of EUVD-2025-210451?

EUVD-2025-210451 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.6%.

Which versions of WTI Devices are affected by EUVD-2025-210451?

WTI web management consoles and power-management appliances (firmware 3.5.0.r, build 2024/05/24) are vulnerable to unauthenticated remote file reading, allowing attackers to extract configuration…

How to fix or mitigate EUVD-2025-210451?

Within 24 hours: Inventory all WTI devices across network infrastructure and confirm which run firmware 3.5.0.r or earlier; isolate affected devices from untrusted networks and restrict web management interface access to authorized administrative networks only. Within 7 days: Implement enhanced monitoring and logging on affected devices to detect reconnaissance activity; assess what sensitive files exist on deployed WTI units (SSH keys, credentials, configuration backups) and evaluate current exposure. Within 30 days: Monitor WTI vendor security advisories for patch availability (subscribe to WTI security notifications); develop a firmware upgrade plan once patches are released, including pre-production validation; if patches remain unavailable, evaluate replacement with patched alternative vendors or implement persistent network access controls (firewall, VPN-only management) as long-term mitigation.

WTI Devices EUVD-2025-210451

| CVE-2025-70796 HIGH

Path Traversal (CWE-22)

2026-07-10 mitre

GHSA-v6x3-78p8-29hj

Path Traversal N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

Unauthenticated, low-complexity remote HTTP request (AV:N/AC:L/PR:N/UI:N) yielding arbitrary file disclosure, so C:H with no integrity or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 18:09 vuln.today

CVE Published

Jul 10, 2026 - 00:00 cve.org

HIGH 7.5

CVE Published

Jul 10, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 2024/05/24 00:00:00. An unauthenticated attacker can craft malicious HTTP requests containing traversal sequences to access files outside of the intended web root directory. This may allow disclosure of sensitive system files and configuration data

AnalysisAI

Unauthenticated path traversal in the WTI (Wireless Technology, Inc.) web management interface (firmware version 3.5.0.r, build 2024/05/24) lets remote attackers read arbitrary files outside the web root by embedding directory-traversal sequences in crafted HTTP requests. Because no authentication is required (PR:N), an attacker on the network can harvest sensitive system files and configuration data - potentially credentials and device settings for these console/serial and power-management appliances. Publicly available exploit code exists (POC referenced on GitHub) and CISA's SSVC framework rates it automatable, though it is not listed in CISA KEV and EPSS remains low at 0.56%.

Technical ContextAI

The flaw is a classic CWE-22 (Improper Limitation of a Pathname to a Restricted Directory / path traversal). The affected component is the HTTP-based web management interface embedded in WTI network infrastructure appliances (WTI, historically associated with console/serial servers, remote-power switches and PDUs used to out-of-band manage racks). The web server fails to canonicalize or sanitize user-supplied path segments, so sequences such as '../' escape the intended web root and resolve to files elsewhere on the device filesystem. The impact is confidentiality-only (C:H, I:N, A:N): the attacker reads files but the vulnerability itself does not permit writing or service disruption. The provided CPE ('cpe:2.3:a:n/a:n/a:*') is a placeholder and does not identify the exact product, so precise CPE-based product identification is not possible from the feed alone.

RemediationAI

No vendor-released patch version is identified in the available data at time of analysis, so upgrade guidance beyond 'obtain fixed firmware from WTI' cannot be stated with an exact version - contact WTI (Western Telematic / Wireless Technology, Inc.) for a firmware update superseding 3.5.0.r 2024/05/24. As compensating controls: remove the web management interface from any internet-facing exposure and restrict it to a dedicated out-of-band management VLAN reachable only from trusted admin hosts (trade-off: legitimate remote admins must use a VPN/jump host); place a reverse proxy or WAF in front that normalizes and rejects requests containing traversal sequences such as '../', encoded variants ('%2e%2e%2f'), and absolute paths (trade-off: may break legitimate URLs and needs tuning); and rotate any credentials or secrets that may have been exposed via readable configuration files, since disclosure may already have occurred. Consult the NVD advisory (https://nvd.nist.gov/vuln/detail/CVE-2025-70796) and the researcher summary (https://github.com/LPO26/Path-Traversal-via-Web-Interface-on-WTI-Devices/blob/main/CVE%20Summary) for details.