Unscored CVE-2017-17309 EUVD-2017-8475GHSA-xvw5-c4h4-r2rh

Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a re…

Published Jun 14, 2018 · Updated Aug 5, 2024 · Assigned by huawei

Vendor: Huawei Product: HG255s-10 Category: Network devices

Description

Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication.

Affected products

Vendor	Product	Affected	Fixed
Huawei Technologies	HG255s-10	V100R001C163B025SP02	—

References

http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en
http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html