Description (CNA)
Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huawei Technologies Co., Ltd. / HG255s-10 | affected V100R001C163B025SP02 |
CWE
No CWE identifiers supplied.
References
- http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en
- http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html
ADP enrichment
No English description supplied.