CVE-2015-8228: Path Traversal
First published: Tue Nov 24 2015(Updated: )
Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 routers with software before V200R006SPH003 allows remote authenticated users to access arbitrary directories via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei AR firmware | <=v200r006c10 | |
| Huawei AR120 firmware | ||
| Huawei AR1200 | ||
| Huawei AR 150 | ||
| Huawei AR160 Firmware | ||
| Huawei AR200 | ||
| Huawei AR2200 Series Firmware | ||
| Huawei AR3200 firmware | ||
| Huawei AR3600 Firmware | ||
| Huawei AR500 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-8228?
CVE-2015-8228 is classified as a high severity vulnerability due to its potential for unauthorized directory access.
How do I fix CVE-2015-8228?
To fix CVE-2015-8228, you should upgrade your Huawei router firmware to version V200R006SPH003 or later.
What devices are affected by CVE-2015-8228?
CVE-2015-8228 affects various Huawei AR routers including models 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600.
Can remote authenticated users exploit CVE-2015-8228?
Yes, remote authenticated users can exploit CVE-2015-8228 to access arbitrary directories on the vulnerable devices.
Is there a workaround for CVE-2015-8228 if I cannot update the firmware?
There are no known workarounds for CVE-2015-8228; the best mitigation is to apply the firmware update.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/remedy
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/huawei
- canonical/huawei ar firmware
- version/huawei ar firmware/v200r006c10
- canonical/huawei ar120 firmware
- canonical/huawei ar1200
- canonical/huawei ar 150
- canonical/huawei ar160 firmware
- canonical/huawei ar200
- canonical/huawei ar2200 series firmware
- canonical/huawei ar3200 firmware
- canonical/huawei ar3600 firmware
- canonical/huawei ar500