CVE-2024-12806

CVSS 4.9v3.1pub. 2025-01-09upd. 2026-04-15

A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

Path Traversal

CWE

References

CVE-2024-12806 — MEDIUM — CVSS 4.9 | CVEbaza.pl