« Volver al listado

CVE-2015-8228

Estado: ModificadaMedia (4)—

Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 routers with software before V200R006SPH003 allows remote authenticated users to access arbitrary directories via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Huawei — AR Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-8228",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-11-24T20:59:21.130",
  "references": [
    {
      "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461676.htm",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461676.htm",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 routers with software before V200R006SPH003 allows remote authenticated users to access arbitrary directories via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en el servidor SFTP en routers Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200 y 3600 con software anterior a V200R006SPH003 permite a usuarios remotos autenticados acceder a directorios arbitrarios a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:34:10.987",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:ar_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBC97868-1A8E-494F-91CF-4B88D3F78FEA",
              "versionEndIncluding": "v200r006c10"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:ar120:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "56D40BC1-0B23-4E8A-98D9-9B39D3799B91"
            },
            {
              "criteria": "cpe:2.3:h:huawei:ar1200:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A72BF4B0-7876-4491-9FA4-922CD2862DD4"
            },
            {
              "criteria": "cpe:2.3:h:huawei:ar150:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "90F3C57D-5BC3-4EA2-9667-758858EBB215"
            },
            {
              "criteria": "cpe:2.3:h:huawei:ar160:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3EB80C67-97F4-421A-8070-D09318BD65CF"
            },
            {
              "criteria": "cpe:2.3:h:huawei:ar200:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E5116885-E711-4224-A1D8-A57BF31371EF"
            },
            {
              "criteria": "cpe:2.3:h:huawei:ar2200:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "14E42770-B4FA-486D-85F1-74AB7B1BEC3F"
            },
            {
              "criteria": "cpe:2.3:h:huawei:ar3200:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9278BF6D-EEA2-4BFE-A330-AEBA6AF32FAA"
            },
            {
              "criteria": "cpe:2.3:h:huawei:ar3600:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "80E9C107-0DA5-4BD9-A43A-08A15030C5D6"
            },
            {
              "criteria": "cpe:2.3:h:huawei:ar500:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "352B3FD3-10E7-4090-9900-10B25C63BF6F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}