CVE-2015-7254: Path Traversal
Published Nov 7, 2015
·Updated
Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. (dot dot) in an icon/ URI.
Affected Software
3 affected components
huawei HG532e
huawei HG532n
huawei HG532s
Event History
Nov 7, 2015
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What devices are affected by CVE-2015-7254?
CVE-2015-7254 affects Huawei HG532e, HG532n, and HG532s devices.
2
What type of vulnerability is identified in CVE-2015-7254?
CVE-2015-7254 is a directory traversal vulnerability that allows remote attackers to read arbitrary files.
3
How can attackers exploit CVE-2015-7254?
Attackers can exploit CVE-2015-7254 by using a .. (dot dot) in an icon/ URI to access unauthorized files.
4
What is the severity level of CVE-2015-7254?
The severity level of CVE-2015-7254 is classified as high due to the potential exposure of sensitive data.
5
How can I mitigate the risk associated with CVE-2015-7254?
To mitigate CVE-2015-7254, users should update to the latest firmware and restrict remote access to the affected devices.