Marvell QConvergeConsole Directory Traversal Arbitrary File Deletion (CVE-2025-6805)

Critical Vulnerability Information Vulnerability Name: (0Day) Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability Vulnerability IDs: - ZDI-25-461 - ZDI-CAN-24925 CVE ID: CVE-2025-6805 CVSS Score: 8.2, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H Affected Vendor: Marvell Affected Product: QConvergeConsole Vulnerability Details: - This vulnerability allows remote attackers to delete arbitrary files on affected Marvell QConvergeConsole installations. Exploitation does not require authentication. - The specific issue lies in the implementation of the deleteEventLogFile method, where insufficient validation of user-supplied paths prior to file operations leads to the vulnerability. - Attackers can exploit this vulnerability to delete files with SYSTEM context. Additional Details: - 2024-09-19 - ZDI submitted the report to the vendor - 2024-09-23 - Vendor confirmed receipt of the report - 2024-10-09 - Vendor communicated that the product is no longer supported - Mitigation: Vendor no longer supports or recommends this tool; the product entered End-of-Life (EOL) and End-of-Support (EOS) status in January 2022, with version v.5.5.0.085. Disclosure Timeline: - 2024-09-19 - Vulnerability reported to vendor - 2025-06-27 - Coordinated public advisory release - 2025-06-27 - Advisory updated Discoverer: Andrea Micalizzi aka rgod (@rgod777)

Goal Reached Thanks to every supporter — we hit 100%!

Marvell QConvergeConsole Directory Traversal Arbitrary File Deletion (CVE-2025-6805)