Huawei HG255s-10 Path Traversal Vulnerability

The Huawei HG255s-10 is a wireless router product from Huawei China. A path traversal vulnerability exists in Huawei HG255s-10 V100R001C163B025SP02 version, which originates from the program failing to adequately validate incoming HTTP requests. A remote attacker could use this vulnerability to...

Path traversal

Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication...

CVE-2017-17309

CVE-2017-17309 is a directory traversal vulnerability in Huawei HG255s-10/HG255 routers (V100R001C163B025SP02) caused by insufficient validation of HTTP requests. A remote attacker can read local files without authentication. Public details include explicit PoCs and public exploits: typical paylo...

CVE-2017-17309

Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication...

Huawei HG255s - Directory Traversal

Exploit Title: Server Directory Traversal at Huawei HG255s Date: 07.09.2017 Exploit Author: Ahmet Mersin Vendor Homepage: www.huawei.com Software Link: Not published this modem just used by Turkey Version: V100R001C163B025SP02 POC: https://www.youtube.com/watch?v=n02toTFkLOU&feature=youtu.be...