Huawei HG532e Default Credential Detection

Huawei HG532e default admin credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG532e default admin credentials were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Huawei...

Huawei HG532e Router Panel - Detect

Huawei HG532e router login panel was detected. After installation, both the default username and default password are user. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG532e router login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

VulnCheck KEV: CVE-2015-7254

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

Huawei Router HG532e - Command Execution Exploit

Exploit for hardware platform in category web applications !/bin/python ''' Author : Rebellion Github : @rebe11ion Twitter : @rebellion ''' import urllib2,requests,os,sys from requests.auth import HTTPDigestAuth DEFAULTHEADERS = "User-Agent": "Mozilla", DEFAULTTIMEOUT = 5 def fetchurlurl: global...

Huawei Router HG532e Command Execution

!/bin/python ''' Author : Rebellion Github : @rebe11ion Twitter : @rebellion ''' import urllib2,requests,os,sys from requests.auth import HTTPDigestAuth DEFAULTHEADERS = "User-Agent": "Mozilla", DEFAULTTIMEOUT = 5 def fetchurlurl: global DEFAULTHEADERS, DEFAULTTIMEOUT request = urllib2.Requesturl...

Huawei HG532e Home Gateway Command Injection

Binary data huaweicmdexec.nbin...

Directory traversal

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

CVE-2015-7254

The Huawei HG532e , HG532n , and HG532s wireless routers are vulnerable to a path traversal vulnerability (CWE-22) because the software does not properly validate HTTP requests on a specific port. A remote, unauthenticated attacker can exploit this by crafting a request to the /icon/ URI using .....

CVE-2015-7254: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

PT-2015-7496

Name of the Vulnerable Software and Affected Versions Huawei HG532e, HG532n, and HG532s devices affected versions not specified Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in an icon/ URI. Recommendations For Huawei HG532e...