Algosec Firewall Analyzer vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Algosec Firewall Analyzer: 2 record(s), with affected versions and fixes.
cpe:2.3:a:algosec:firewall_analyzer

CVE-2025-12381 High · 7.8 CWE-269 Dec 9, 2025

Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This issue affects Firewall Analyzer: A33.0, A33.10.

CVE-2025-12382 High · 8.8 CWE-22 Nov 12, 2025

Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).