Medium severity6.5NVD Advisory· Published Nov 6, 2025· Updated Jun 17, 2026
CVE-2025-34238
CVE-2025-34238
Description
Advantech WebAccess/VPN versions prior to 1.1.5 contain an absolute path traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() that allows an authenticated network administrator to cause the application to read and return the contents of arbitrary files the web user (www-data) can access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.