---
id: CVE-2025-70796
title: >-
  An unauthenticated path traversal vulnerability exists in the web management
  interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 2024/05/24
  00:00:00
summary: >-
  An unauthenticated path traversal vulnerability exists in the web management
  interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 2024/05/24
  00:00:00. An unauthenticated attacker can craft malicious HTTP requests
  containing trave…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
published: '2026-07-10'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T10:10:00.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-70796'
references:
  - url: >-
      https://github.com/LPO26/Path-Traversal-via-Web-Interface-on-WTI-Devices/blob/main/CVE%20Summary
    label: cve@mitre.org
  - url: >-
      https://github.com/LPO26/Path-Traversal-via-Web-Interface-on-WTI-Devices/tree/main
    label: cve@mitre.org
  - url: >-
      https://github.com/LPO26/Path-Traversal-via-Web-Interface-on-WTI-Devices/blob/main/CVE%20Summary
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00761
epssPercentile: 0.54071
ingestedAt: '2026-10-13T10:22:03.547Z'
---

## Overview

An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 2024/05/24 00:00:00. An unauthenticated attacker can craft malicious HTTP requests containing traversal sequences to access files outside of the intended web root directory. This may allow disclosure of sensitive system files and configuration data

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.