CVE-2018-25312CWE-22

LifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution

High · published April 29, 2026

CVSS v4.0
7.1
EPSS
1%
Percentile
60.3
In the wild
Unconfirmed
What it is

LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating path parameters in the smartgui interface. Attackers can exploit the upload endpoint with directory traversal sequences to write files to arbitrary locations on the system, enabling remote code execution.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00933 · 60.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-04-29T19:24Z
EPSS history
Timeline
  • 29 APR 19:24Z
    LifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution
    cvelistv5