PT-2025-48101 · Deciso+1 · Opnsense+1

Alex Williams · CVE-2025-13698 · Published 2025-11-25 · Updated 2025-12-24

Positive Technologies (AI Summary)

CVSS v3.1

4.5

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Deciso OPNsense (affected versions not specified)

Description A flaw exists in Deciso OPNsense related to the handling of backup configuration files, specifically within the diag backup.php script. This allows network-adjacent attackers with authentication to create arbitrary files on affected systems. The issue stems from insufficient validation of user-supplied paths before they are used in file operations, enabling an attacker to create files with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-13698

ZDI-25-1022

Affected Products

Opnsense

Core

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13698.json · Exploit
• https://github.com/opnsense/core/commit/cb15c935137d05c86a1e6cf12af877e9c32a23af · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13698 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13698 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-1022 · Security Note
• https://twitter.com/CVEnew/status/2003700519865618619 · Twitter Post