VulnCheck KEV: CVE-2015-7254

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

Huawei Router HG532e - Command Execution Exploit

Exploit for hardware platform in category web applications !/bin/python ''' Author : Rebellion Github : @rebe11ion Twitter : @rebellion ''' import urllib2,requests,os,sys from requests.auth import HTTPDigestAuth DEFAULTHEADERS = "User-Agent": "Mozilla", DEFAULTTIMEOUT = 5 def fetchurlurl: global...

Huawei Router HG532e Command Execution

!/bin/python ''' Author : Rebellion Github : @rebe11ion Twitter : @rebellion ''' import urllib2,requests,os,sys from requests.auth import HTTPDigestAuth DEFAULTHEADERS = "User-Agent": "Mozilla", DEFAULTTIMEOUT = 5 def fetchurlurl: global DEFAULTHEADERS, DEFAULTTIMEOUT request = urllib2.Requesturl...

Huawei HG532e Home Gateway Command Injection

Binary data huaweicmdexec.nbin...

Directory traversal

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

CVE-2015-7254

The Huawei HG532e , HG532n , and HG532s wireless routers are vulnerable to a path traversal vulnerability (CWE-22) because the software does not properly validate HTTP requests on a specific port. A remote, unauthenticated attacker can exploit this by crafting a request to the /icon/ URI using .....

CVE-2015-7254: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

PT-2015-7496

Name of the Vulnerable Software and Affected Versions Huawei HG532e, HG532n, and HG532s devices affected versions not specified Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in an icon/ URI. Recommendations For Huawei HG532e...