{"id":"CVE-2025-12381","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-12381","generatedAt":"2026-10-28T03:30:21.070Z","title":"Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection.","description":"Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection.\n\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. \nThis issue affects Firewall Analyzer: A33.0, A33.10.","published":"2025-12-09T16:17:34.000Z","lastModified":"2026-10-07T20:10:02.000Z","status":"Analyzed","sourceIdentifier":"security.vulnerabilities@algosec.com","cvss":{"version":"4.0","score":6.1,"severity":"MEDIUM","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-269"],"affected":["algosec/firewall analyzer"],"epss":{"score":0.0016,"percentile":0.05125,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2025-12381.htm","tags":["Vendor Advisory"],"source":"security.vulnerabilities@algosec.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-12381","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}