CVE-2025-6798 in QConvergeConsole
Summary
by MITRE • 07/07/2025
Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the deleteAppFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete files in the context of SYSTEM. Was ZDI-CAN-24918.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/20/2026
The Marvell QConvergeConsole directory traversal vulnerability represents a critical security flaw that enables remote attackers to perform arbitrary file deletion operations without requiring authentication credentials. This vulnerability resides within the deleteAppFile method implementation and demonstrates a fundamental failure in input validation mechanisms. The absence of proper path validation allows malicious actors to manipulate file paths and execute destructive operations on the target system. The vulnerability specifically affects installations where the QConvergeConsole application is deployed, creating a persistent threat vector that can be exploited from external networks.
The technical root cause of this vulnerability stems from inadequate input sanitization within the deleteAppFile method functionality. When user-supplied path data is processed without proper validation, it creates an environment where attackers can craft malicious input sequences that bypass normal file system access controls. This flaw enables path traversal attacks where specially crafted file paths can navigate beyond intended directories and target critical system files. The vulnerability operates at a low privilege level within the application's file handling mechanisms, allowing execution of destructive operations with elevated privileges. According to CWE classification, this represents a variant of CWE-22 Path Traversal vulnerabilities that specifically impact file deletion operations rather than file reading or writing.
The operational impact of this vulnerability extends beyond simple file deletion capabilities to encompass potential system compromise and service disruption. Attackers exploiting this vulnerability can delete critical application files, configuration data, or system components that may lead to complete application failure or system instability. The fact that no authentication is required makes this vulnerability particularly dangerous as it can be exploited by any remote attacker without prior access credentials. This vulnerability creates opportunities for attackers to escalate their privileges and potentially achieve SYSTEM-level access, which aligns with ATT&CK technique T1059 Command and Scripting Interpreter for executing malicious operations. The ability to delete files in the context of SYSTEM provides attackers with significant control over the affected system's file structure and operational integrity.
Security mitigation strategies should focus on implementing robust input validation mechanisms within the deleteAppFile method and all related file handling functions. Organizations must immediately apply vendor-provided patches or updates that address this specific vulnerability in their Marvell QConvergeConsole installations. Network segmentation and access control measures should be implemented to limit exposure of affected systems to untrusted networks. The implementation of principle of least privilege should ensure that the application operates with minimal required permissions, reducing the potential impact of successful exploitation attempts. Regular security assessments and penetration testing should verify that proper input validation has been implemented throughout the application's file handling components to prevent similar directory traversal vulnerabilities from emerging in other functions.