A path traversal vulnerability in the Wireshark profile import feature allows unauthenticated local attackers to trigger a denial of service or potential code execution.

This is a path traversal flaw (CWE-22) affecting the profile import functionality. The vulnerability is triggered by an unauthenticated local user when importing a malicious profile, potentially leading to unauthorized file access or execution of arbitrary code.

Successful exploitation allows an attacker to manipulate system files or execute code with the privileges of the user running Wireshark. With a CVSS score of 7.0, this represents a high-severity risk, as the integrity and availability of the analysis workstation could be compromised, potentially leading to further lateral movement within the network.

Immediate Action: Upgrade to Wireshark version 4.6.5 or later, as these versions contain the necessary security patches to resolve the traversal flaw.

Proactive Monitoring: Review system access logs for unusual file activity or attempts to access restricted directories during the profile import process.

Compensating Controls: Restrict the ability of untrusted users to import configuration profiles into the Wireshark application until the software has been updated.

Public Exploit Available: Unknown.

Given the potential for remote code execution, organizations should treat this vulnerability with high priority. Administrators should ensure that all instances of Wireshark are updated to the latest patched versions immediately to prevent potential exploitation of the profile import mechanism.