CVE-2012-5969

Currently unrated

Key Information:

Vendor
Huawei
Status
E585
E585u-82
Vendor
CVE Published:
19 December 2012

Summary

Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbitrary files via a .. (dot dot) in the req_page parameter to en/sms.cgi.

References

http://www.huawei.com/en/security/psirt/security-bulletin...
x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/871148
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.