CVE-2015-7254

Опубликовано: 07 нояб. 2015

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. (dot dot) in an icon/ URI.

Ссылки

http://www.huawei.com/en/psirt/security-advisories/hw-462908
http://www.kb.cert.org/vuls/id/438928
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/77506
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462908.htm
https://github.com/0xAdrian/scripts/blob/master/2015_7254_exploit.py
https://www.exploit-db.com/exploits/45991/
http://www.huawei.com/en/psirt/security-advisories/hw-462908
http://www.kb.cert.org/vuls/id/438928
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/77506
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462908.htm
https://github.com/0xAdrian/scripts/blob/master/2015_7254_exploit.py
https://www.exploit-db.com/exploits/45991/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:huawei:hg532e:-:*:*:*:*:*:*:*

cpe:2.3:h:huawei:hg532n:-:*:*:*:*:*:*:*

cpe:2.3:h:huawei:hg532s:-:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.19179

Средний

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-558f-5537-gq4c

github

больше 3 лет назад