Marvell QConvergeConsole Directory Traversal Info Disclosure (CVE-2025-6804)

Critical Vulnerability Information Vulnerability Name: (0Day) Marvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure Vulnerability Vulnerability IDs: - ZDI-25-453 - ZDI-CAN-24924 - CVE ID: CVE-2025-6804 CVSS Score: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Vendor: Marvell Affected Product: QConvergeConsole Vulnerability Details: - This vulnerability allows remote attackers to disclose sensitive information on affected Marvell QConvergeConsole installations. Exploitation does not require authentication. - The specific flaw resides in the implementation of the compressFirmwareDumpFiles method. The issue stems from insufficient validation of user-supplied paths prior to file operations. Attackers can exploit this vulnerability to disclose information under SYSTEM context. Additional Details: - 2024-09-17 - ZDI submitted the report to the vendor - 2024-09-23 - Vendor confirmed receipt of the report - 2024-10-09 - Vendor communicated that the product is no longer supported - Mitigation: Vendor no longer supports or recommends this tool. The product reached end-of-life (EOL) and end-of-support (EOS) status after releasing v5.5.0.085 in January 2022 Disclosure Timeline: - 2024-09-17 - Vulnerability reported to vendor - 2025-06-27 - Coordinated public advisory release - 2025-06-27 - Advisory updated Contributor: Andrea Micalizzi aka rgod (@rgod777)

Goal Reached Thanks to every supporter — we hit 100%!

Marvell QConvergeConsole Directory Traversal Info Disclosure (CVE-2025-6804)