VulnCheck KEV: CVE-2015-7254

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

Huawei HG532n - Command Injection (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'base64' class MetasploitModule 'Huawei HG532n Command Injection', 'Description' = %q This module exploits a command injection vulnerability in...

Huawei HG532n Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in the Huawei HG532n routers provided by TE-Data Egypt, leading to a root shell. The router's web interface has two kinds of logins, a "limited" user:user login given to all customers and an admin mode. The limited mode is used her...

Huawei HG532n Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'base64' class MetasploitModule 'Huawei HG532n Command Injection', 'Description' = %q This module exploits a command injection vulnerability in...

Huawei HG532n Command Injection

This module exploits a command injection vulnerability in the Huawei HG532n routers provided by TE-Data Egypt, leading to a root shell. The router's web interface has two kinds of logins, a "limited" user:user login given to all customers and an admin mode. The limited mode is used here to expose...

Huawei HG532n Command Injection Vulnerability

The HG532n is a wireless router product from Huawei, a Chinese company. The Huawei HG532n suffers from a command injection vulnerability that can be exploited by an attacker to conduct a command injection attack...

Directory traversal

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

CVE-2015-7254

The Huawei HG532e , HG532n , and HG532s wireless routers are vulnerable to a path traversal vulnerability (CWE-22) because the software does not properly validate HTTP requests on a specific port. A remote, unauthenticated attacker can exploit this by crafting a request to the /icon/ URI using .....

CVE-2015-7254: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

PT-2015-7496

Name of the Vulnerable Software and Affected Versions Huawei HG532e, HG532n, and HG532s devices affected versions not specified Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in an icon/ URI. Recommendations For Huawei HG532e...