Directory Traversal Vulnerability in Huawei Routers

CVE-2015-8228

Summary

A directory traversal vulnerability exists in the SFTP server of Huawei AR series routers, which can be exploited by remote authenticated users. This flaw enables attackers to navigate outside the intended directories and gain unauthorized access to sensitive files or other directory locations. It affects multiple models with software versions prior to V200R006SPH003, posing a significant risk to network security. The vulnerability is activated through various unspecified vectors, emphasizing the need for timely patching and security measures to mitigate potential threats.

References