CVE-2025-70819
Received Received - Intake

Path Traversal in Zettlab D6 Ultra

Publication date: 2026-09-13

Last updated on: 2026-09-13

Assigner: MITRE

Description
Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-13
Last Modified
2026-09-13
Generated
2026-09-14
AI Q&A
2026-09-13
EPSS Evaluated
N/A
NVD
CVE-2025-70819
EUVD
EUVD-2025-210895

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
zettlab d6_ultra to 1.7.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-24 The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "../" sequences that can resolve to a location that is outside of that directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-70819 is a vulnerability in Zettlab D6 Ultra before version 1.7.0 that allows mounting critical host system files like /etc/passwd and /etc/shadow into a Docker container via path traversal in volume definitions. This can be exploited by specifying paths like ../../../../../../../etc:/h_etc:rw in a compose file.

Detection Guidance

Check Docker container configurations for suspicious volume mounts using commands like 'docker inspect <container_name> | grep -A 10 Mounts' or 'docker volume ls'. Look for paths containing '/etc/passwd' or '/etc/shadow' in compose files or Docker run commands.

Impact Analysis

This vulnerability allows an attacker with access to the system to gain root access by mounting host files into a container. This could enable unauthorized SSH access, creation of backdoor users, and potential full control over the device.

Compliance Impact

This vulnerability allows unauthorized access to sensitive system files like /etc/passwd and /etc/shadow through container volume manipulation. This could lead to exposure of user credentials and system configurations, potentially violating data protection requirements under GDPR and HIPAA by compromising confidentiality and integrity of sensitive data.

Mitigation Strategies

Update Zettlab D6 Ultra to firmware version 1.7.0 or later. Remove any Docker volume mounts that use path traversal like '../../' to access host files. Disable SSH access if enabled and monitor for unauthorized changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-70819. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart