CVE-2025-40629
HIGHPNETLab 4.2.10 - Path Traversal via HTTP Request File Path Manipulation
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-40629. PoCs published by adminlove520, omr00t.
AI-analyzed exploit summary This repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.
Description
PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requests. Specifically, the application is vulnerable to requests that access sensitive files outside the intended directory.
Exploits (2)
This repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.
This PoC exploits an authenticated path traversal vulnerability in PNETLab (CVE-2025-40629) by abusing the /api/export endpoint to read arbitrary files from the server. It authenticates with default credentials, identifies a valid lab file, and crafts a traversal payload to exfiltrate the target file via a ZIP download.
References (1)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N