CVE-2015-7254

EXPLOITED

Huawei Hg532e - Path Traversal

Title source: rule

Description

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. (dot dot) in an icon/ URI.

Exploits (1)

exploitdb WORKING POC

by Rebellion · pythonwebappshardware

https://www.exploit-db.com/exploits/45991

View Code ZIP pw:eip

References (6)

[Various Sources] http://www.huawei.com/en/psirt/security-advisories/hw-462908

[Third Party Advisory, US Government Resource] http://www.kb.cert.org/vuls/id/438928

[Various Sources] http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462908.htm

[Various Sources] https://github.com/0xAdrian/scripts/blob/master/2015_7254_exploit.py

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/77506

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/45991/

Scores

EPSS 0.1918

EPSS Percentile 95.4%

Details

VulnCheck KEV 2022-01-12

CWE

CWE-22

Status published

Products (3)

huawei/hg532e

huawei/hg532n

huawei/hg532s

Published Nov 07, 2015

Tracked Since Feb 18, 2026