CVE-2025-54317: Path Traversal in Logpoint

The impact of CVE-2025-54317 is severe due to the potential for remote code execution. An attacker exploiting this vulnerability could gain complete control over the Logpoint system, allowing them to steal sensitive data, install malware, or disrupt operations. The requirement of operator privileges limits the initial attack vector, but once gained, the attacker's access is extensive. Successful exploitation could lead to a full system compromise, impacting the confidentiality, integrity, and availability of monitored data and the underlying infrastructure.

1. Reserved2025-07-20
2. Published2025-07-20
3. Modified2025-07-30
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-54317 is to upgrade Logpoint to version 7.6.0 or later, which contains the fix. If immediate upgrading is not possible, consider implementing strict access controls to limit the number of users with operator privileges. Review and restrict file system access permissions for the Logpoint user account. Monitor Logpoint logs for suspicious activity related to Layout Template creation. While a WAF cannot directly prevent this path traversal, it can be configured to detect and block requests containing unusual file paths.