Back to Database
Status published
Critical
CVE-2025-48017
Improper Limitation of a Pathname to a Restricted Directory
Vulnerability Description
Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48017
Credits & Attribution
No credits recorded in the NVD database.
More from Schweitzer Engineering Laboratories
View All →CVE-2025-48018
Deserialization of Untrusted Data
High
7.5
CVE-2025-48016
Improper Control of Interaction Frequency
Medium
4.3
CVE-2025-48015
Observable Response Discrepancy
Low
3.7
CVE-2025-48014
Improper Restriction of Excessive Authentication Attempts
High
7.5
CVE-2025-46750
Authentication Bypass
Medium
4.4
Affected Vendor
Schweitzer Engineering Laboratories
View all reports →Affected Software
SEL-5056 Software-Defined Network Flow Controller
Vulnerable Versions:
0
Timeline
Official Publish:
May 20th, 2025
Last Modified:
May 20th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H