CVE-2017-17309: Path Traversal
Published Jun 14, 2018
·Updated
Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication.
Affected Software
2 affected components
Huawei Hg255s-10 Firmware=v100r001c163b025sp02
Huawei HG255s-10
Event History
Jun 14, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-17309?
CVE-2017-17309 has a medium severity rating due to the potential for unauthorized file access.
2
How do I fix CVE-2017-17309?
To fix CVE-2017-17309, upgrade the Huawei HG255s-10 firmware to a version that addresses this vulnerability.
3
Who is affected by CVE-2017-17309?
CVE-2017-17309 affects users of the Huawei HG255s-10 firmware version V100R001C163B025SP02.
4
What type of vulnerability is CVE-2017-17309?
CVE-2017-17309 is a path traversal vulnerability allowing remote attackers to access local files.
5
Is authentication required to exploit CVE-2017-17309?
No, CVE-2017-17309 does not require authentication for exploitation, making it more critical.