CVE-2025-34173: Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure
In pfSense CE /usr/local/www/snort/snort_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related characters/strings before being used to check if a file exists. While the contents of the file cannot be read, the server reveals whether a file exists, which allows an attacker to enumerate files on the target. The attacker must be authenticated with at least "WebCfg - Services: Snort package" permissions.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34173?
CVE-2025-34173 is classified as a medium-severity vulnerability due to directory traversal risks.
How do I fix CVE-2025-34173?
To fix CVE-2025-34173, ensure that the iplist parameter is properly sanitized to prevent directory traversal attacks.
Which software versions are affected by CVE-2025-34173?
CVE-2025-34173 affects Netgate pfSense CE versions where the iplist parameter is not sanitized.
What kind of attack can exploit CVE-2025-34173?
CVE-2025-34173 can be exploited to carry out directory traversal attacks, allowing potential information disclosure.
What file is involved in the CVE-2025-34173 vulnerability?
The vulnerability in CVE-2025-34173 involves the /usr/local/www/snort/snort_ip_reputation.php file.