CVE-2015-7250
published 2015-12-30CVE-2015-7250: Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read…
PriorityP263high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
15.54%
96.4th percentile
Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zte | zxhn_h108n_r1a_firmware | <= zte.bhs.zxhnh108nr1a.h_pe | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/77421https://www.exploit-db.com/exploits/38773/https://www.kb.cert.org/vuls/id/391604https://www.kb.cert.org/vuls/id/BLUU-9ZDJWAhttp://www.securityfocus.com/bid/77421https://www.exploit-db.com/exploits/38773/https://www.kb.cert.org/vuls/id/391604https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
2015-12-30
Published