References https://cn.t00ls.com/articles-58946.html https://www.ddpoc.com/DVB-2023-4338.html https://www.huawei.com/cn/psirt/security-advisories/2015/hw-462907 https://www.huawei.com/cn/psirt/security-advisories/2018/huawei-sa-20180502-01-gateway-cn https://www.huawei.com/en/psirt/security-advisories/2021/huawei-sa-20210630-01-pathtraversal-en https://www.huawei.com/en/psirt/security-advisories/2015/hw-461680 https://www.huawei.com/en/psirt/security-advisories/2016/huawei-sa-20160928-01-pathtraversal-en https://www.kb.cert.org/vuls/id/438928 https://www.redpiranha.net/news/huawei-routers-vulnerable-directory-traversal-attacks-cve-2015-7254 https://github.com/ismailtsdln/huawei_hg255_exploit
Related Vulnerabilities全程云OA /OA/Common/API/Huawei.asmx SQL 注入漏洞PoCCVE-2019-19411: Huawei Firewall - Local File InclusionPoChuawei-hg532e-default-login: Huawei HG532e Default CredentialPoChuawei-dg8045-home-gateway-password-leakage: Huawei DG8045 deviceinfo 信息泄漏漏洞PoChuawei-auth-http-fileread: 华为Auth-HTTP服务器任意文件读取漏洞PoChuawei-home-gateway-hg659-fileread: Huawei Home Gateway Hg659 FilereadPoChuawei-HG532e-default-login: Huawei HG532e Default CredentialPoChuawei-authhttp-lfi: Huawei Auth Http Server - Arbitrary File ReadPoChuawei-hg255s-lfi: Huawei HG255s - Local File InclusionPoChuawei-hg659-lfi: HUAWEI HG659 - Local File InclusionPoChuawei-router-auth-bypass: Huawei Router - Authentication BypassPoChuawei-esight-detect: Huawei ESight DetectHuawei VPN umweb 接口任意文件读取漏洞