1. Home
  2. CVE Database
  3. CVE-2015-8228
MEDIUM · 4.0

CVE-2015-8228

Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 routers with software before V200R006SPH003 allows remote authenticated users to a...

Vulnerability Description

Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 routers with software before V200R006SPH003 allows remote authenticated users to access arbitrary directories via unspecified vectors.

CVSS Score

4.0

MEDIUM

AV:N/AC:L/Au:S/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HuaweiAr Firmware<= v200r006c10
HuaweiAr120All versions
HuaweiAr1200All versions
HuaweiAr150All versions
HuaweiAr160All versions
HuaweiAr200All versions
HuaweiAr2200All versions
HuaweiAr3200All versions
HuaweiAr3600All versions
HuaweiAr500All versions

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2015-8228?

CVE-2015-8228 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 routers with software before V200R006SPH003 allows remote authenticated users to a...

How severe is CVE-2015-8228?

CVE-2015-8228 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-8228?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ar Firmware, Huawei Ar120, Huawei Ar1200, Huawei Ar150, Huawei Ar160.