Vulnerability Details CVE-2025-40889
A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure and content of files in the /data folder, and/or affect their availability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.5%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2025-40889
-
cpe:2.3:a:nozominetworks:cmc:22.0.0
-
cpe:2.3:a:nozominetworks:cmc:22.5.2
-
cpe:2.3:a:nozominetworks:cmc:22.6.0
-
cpe:2.3:a:nozominetworks:cmc:22.6.3
-
cpe:2.3:a:nozominetworks:cmc:23.0.0
-
cpe:2.3:a:nozominetworks:cmc:23.1.0
-
cpe:2.3:a:nozominetworks:cmc:23.3.0
-
cpe:2.3:a:nozominetworks:guardian:19.0.4
-
cpe:2.3:a:nozominetworks:guardian:22.0.0
-
cpe:2.3:a:nozominetworks:guardian:22.5.2
-
cpe:2.3:a:nozominetworks:guardian:22.6.0
-
cpe:2.3:a:nozominetworks:guardian:22.6.3
-
cpe:2.3:a:nozominetworks:guardian:23.0.0
-
cpe:2.3:a:nozominetworks:guardian:23.1.0
-
cpe:2.3:a:nozominetworks:guardian:23.3.0