Lucene search

K
cve[email protected]CVE-2015-7250
HistoryDec 30, 2015 - 5:59 a.m.

CVE-2015-7250

2015-12-3005:59:03
CWE-22
web.nvd.nist.gov
24
cve-2015-7250
absolute path traversal vulnerability
zte zxhn h108n r1a
remote attackers
arbitrary files
pathname
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.

Affected configurations

NVD
Node
ztezxhn_h108n_r1a_firmwareRangezte.bhs.zxhnh108nr1a.h_pe
AND
ztezxhn_h108n_r1a

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%