Personal Weather Station Dashboard - Path Traversal (CVE-2025-47423)
Description
Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php, as demonstrated by reading the server's private SSL key in cleartext.
psychologyCrowdSec Analysis
CVE-2025-47423 is a path traversal vulnerability in Personal Weather Station Dashboard 12_lts that allows unauthenticated remote attackers to read arbitrary files on the server by exploiting the test parameter in /others/_test.php. This flaw could be leveraged to access sensitive files, such as the server's private SSL key, potentially leading to further compromise of the system's security.
CrowdSec has been tracking this vulnerability and its exploits since 21st of January 2026.
CrowdSec has not observed any significant exploitation activity targeting CVE-2025-47423 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit the /others/_test.php endpoint by supplying directory traversal sequences (e.g., ../) in the test parameter to access sensitive files such as private SSL keys.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2025-05-07 |
| Rule Released | 2026-01-21 |
| CrowdSec First Seen | 2026-05-21 |