high7.5
CVE-2017-17309
Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may ac…
Impact
Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Hg255s-10 Firmware | Version v100r001c163b025sp02 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html
- http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en
- http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html
- http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en