PT-2015-7750 · Huawei · Huawei Ar Routers+1

Published 2015-11-11 · Updated 2015-11-25 · CVE-2015-8228

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei AR routers versions before V200R006SPH003

Description The issue allows remote authenticated users to access arbitrary directories via unspecified vectors, potentially leading to information leaks. An attacker can log in to the router and traverse FTP server directories to access unauthorized directories.

Recommendations For versions before V200R006SPH003, update to V200R006SPH003 or later to resolve the issue. As a temporary workaround, consider restricting access to the SFTP server to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2015-8228

Affected Products

Huawei Ar Routers

Huawei Vrp

References · 4

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8228 · Security Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461676.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8228 · Security Note
• https://huawei.com/en/psirt/security-advisories/hw-461676 · Note