CVE-2025-6796 Marvell QConvergeConsole Directory Traversal Information Disclosure

Critical Vulnerability Information Vulnerability Name: (0Day) Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability Vulnerability ID: ZDI-25-451, ZDI-CAN-24916 CVE ID: CVE-2025-6796 CVSS Score: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Vendor: Marvell Affected Product: QConvergeConsole Vulnerability Details Description: This vulnerability allows remote attackers to disclose sensitive information on affected Marvell QConvergeConsole installations. Exploitation of this vulnerability does not require authentication. Specific Issue: The issue arises from a specific flaw in the implementation of the getAppFileBytes method, due to the lack of proper validation of user-supplied paths before file operations. Additional Details Report Submission: On September 17, 2024, ZDI submitted the report to the vendor. Vendor Acknowledgment: On September 23, 2024, the vendor confirmed receipt of the report. Support Status: On October 9, 2024, the vendor communicated that the product is no longer supported. Mitigation: The vendor no longer supports or recommends this tool. The product reached end-of-life (EOL) and end-of-support (EOS) status after the release of v5.5.0.85 in January 2022. Disclosure Timeline Reported to Vendor: 2024-09-17 Coordinated Public Release: 2025-06-27 Advisory Update: 2025-06-27 Acknowledgments Discoverer: Andrea Micalizzi aka rgod (@rgod777)

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-6796 Marvell QConvergeConsole Directory Traversal Information Disclosure