Lucene search
+L

CVE-2015-7254

🗓️ 07 Nov 2015 02:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 113 Views🌐 WEB

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s device

Related
Detection
Refs
Paths
NVD
Node
ParameterPositionPathDescriptionCWE
..path/icon/../../../Directory traversal vulnerability in the icon/ URI allows remote attackers to read arbitrary files from the filesystem.CWE-22
NewStatusURLrequest body/ctrlt/DeviceUpgrade_1The DeviceUpgrade_1 endpoint accepts a SOAP request where the NewStatusURL parameter can be used to execute commands via a shell injection-like mechanism (as shown in the exploit's command construction).CWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:32Current
6.8Medium risk
Vulners AI Score6.8
CVSS 25
EPSS0.27528
113