Security Advisory

CVE-2012-5969

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-12-19 11:00:00
Last updated 2024-09-17 01:26:57
Assigner certcc
CVSS score not scored
State PUBLISHED

Description

Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbitrary files via a .. (dot dot) in the req_page parameter to en/sms.cgi.