Directory Traversal Vulnerabilities in Huawei E585 Device
CVE-2012-5969

Currently unrated

Key Information:

Vendor
Huawei
Status
E585
E585u-82
Vendor
CVE Published:
19 December 2012

Summary

The Huawei E585 device is susceptible to multiple directory traversal vulnerabilities that enable remote attackers to exploit the system. By manipulating the PATH_INFO parameter through a crafted request, attackers can read arbitrary files on the device. Additionally, they can modify files via the req_page parameter in the en/sms.cgi request, leading to further unauthorized actions and potential data compromise. This vulnerability poses a significant risk, underscoring the need for robust security measures to protect sensitive data.

References

http://www.huawei.com/en/security/psirt/security-bulletin...
x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/871148
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.