Information disclosure in Huawei products - CVE-2016-8280

Vulnerability identifier: #VU727

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2016-8280

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
Huawei USG5500
Huawei USG5100
Huawei USG2200
Huawei USG2100

Software vendor:
Huawei

The vulnerability allows a remote authenticated user to read potentially sensitive information on the target system.
The weakness exists due to insufficient input verification. Via unspecified vectors attackers can access important data and view it.
Successful exploitation of the vulnerability results in information disclosure.

Update to V300R001C10SPC600.

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160928-01-pathtraversal-en%20
• http://w...