CVE-2025-2239 - CVE House
Back to Database
Status published Medium CVE-2025-2239

Absolute Path Disclosure Vulnerability in Hillstone Next Generation FireWall

Vulnerability Description

Generation of Error Message Containing Sensitive Information vulnerability in Hillstone Networks Hillstone Next Generation FireWall.This issue affects Hillstone Next Generation FireWall: from 5.5R8P1 before 5.5R8P23.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-2239

Credits & Attribution

No credits recorded in the NVD database.

References

More from Hillstone Networks

View All →
CVE-2024-8073
Command Injection Vulnerability in Hillstone Networks Web Application Firewall
Critical 9.8

Affected Vendor

Hillstone Networks

View all reports →

Affected Software

Hillstone Next Generation FireWall
Vulnerable Versions:
5.5R8P1

Timeline

Official Publish: March 12th, 2025
Last Modified: March 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-209

MITRE ATT&CK TTPs

T1592 Gather Victim Host Information
Reconnaissance
T1083 File and Directory Discovery
Discovery
T1552 Unsecured Credentials
Credential Access
T1212 Exploitation for Defense Evasion
Defense Evasion
T1005 Data from Local System
Collection