ByteOS Network

Vulnerability Details :

CVE-2012-5969

Assigner-certcc

Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b

Published At-19 Dec, 2012 | 11:00

Updated At-17 Sep, 2024 | 01:26

Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbitrary files via a .. (dot dot) in the req_page parameter to en/sms.cgi.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:certcc

Assigner Org ID:37e5125f-f79b-445b-8fad-9564f167944b

Published At:19 Dec, 2012 | 11:00

Updated At:17 Sep, 2024 | 01:26

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm	x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/871148	third-party-advisory x_refsource_CERT-VN

Hyperlink: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.kb.cert.org/vuls/id/871148

Resource:

third-party-advisory

x_refsource_CERT-VN

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm	x_refsource_CONFIRM x_transferred
http://www.kb.cert.org/vuls/id/871148	third-party-advisory x_refsource_CERT-VN x_transferred

Hyperlink: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/871148

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cret@cert.org

Published At:19 Dec, 2012 | 11:55

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.8	MEDIUM	AV:A/AC:L/Au:N/C:P/I:P/A:N
Primary	2.0	4.8	MEDIUM	AV:A/AC:L/Au:N/C:P/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.8

Base severity: MEDIUM

Vector:

AV:A/AC:L/Au:N/C:P/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.8

Base severity: MEDIUM

Vector:

AV:A/AC:L/Au:N/C:P/I:P/A:N

CPE Matches

Huawei Technologies Co., Ltd.

>>e585>>-

cpe:2.3:h:huawei:e585:-:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>e585u-82>>-

cpe:2.3:h:huawei:e585u-82:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-22	Primary	nvd@nist.gov

CWE ID: CWE-22

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm	cret@cert.org	Vendor Advisory
http://www.kb.cert.org/vuls/id/871148	cret@cert.org	US Government Resource
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.kb.cert.org/vuls/id/871148	af854a3a-2127-422b-91ae-364da2661108	US Government Resource

Hyperlink: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm

Source: cret@cert.org

Resource:

Vendor Advisory

Hyperlink: http://www.kb.cert.org/vuls/id/871148

Source: cret@cert.org

Resource:

US Government Resource

Hyperlink: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.kb.cert.org/vuls/id/871148

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Similar CVEs

55Records found

CVE-2021-22404

Matching Score-6

Assigner-Huawei Technologies

View Details

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.07% / 21.06%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 12:21

Updated-03 Aug, 2024 | 18:44

There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Vendor-Huawei Technologies Co., Ltd.

Product-magic_ui emui Magic UI EMUI

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2020-9106

Matching Score-6

Assigner-Huawei Technologies

View Details

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-4.6||MEDIUM

EPSS-0.03% / 6.45%

7 Day CHG~0.00%

Published-12 Oct, 2020 | 13:43

Updated-04 Aug, 2024 | 10:19

HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate certain pathname, successful exploit could allow the attacker access files and cause information disclosure.

Vendor-n/a Huawei Technologies Co., Ltd.

Product-p30_pro p30_pro_firmware HUAWEI P30 Pro

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2020-9252

Matching Score-6

Assigner-Huawei Technologies

View Details

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-2.3||LOW

EPSS-0.03% / 7.09%

7 Day CHG~0.00%

Published-17 Jul, 2020 | 22:50

Updated-04 Aug, 2024 | 10:19

HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Honor Magic2 smartphones versions earlier than 10.1.0.160(C00E160R2P11) have a path traversal vulnerability. The system does not sufficiently validate certain pathname from certain process, successful exploit could allow the attacker write files to a crafted path.

Vendor-n/a Huawei Technologies Co., Ltd.

Product-mate_20_rs magic2_firmware mate_20 mate_20_rs_firmware magic2 mate_20_x mate_20_x_firmware mate_20_firmware HUAWEI Mate 20 X Honor Magic2 HUAWEI Mate 20 HUAWEI Mate 20 RS

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2018-16594

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.15% / 36.38%

7 Day CHG~0.00%

Published-19 Jun, 2019 | 18:13

Updated-05 Aug, 2024 | 10:24

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal.

Vendor-n/a Sony Group Corporation

Product-kd-43xe7002 kd-55xe7005 kdl-32r503c kdl-32wd753 kdl-40r555c kd-65xe7005 kdl-48r555c kd-65xe7093 kd-55xe7077 kdl-32wd759 kd-49xe7073 kdl-49wd758 kdl-49wd756 kdl-43wd751 kd-43xe7000 kdl-48r553c kdl-48r550c kd-43xe7093 kdl-49wd754 kdl-32wd754 kd-55xe7093 kdl-32wd758 kd-49xe7003 wf6 kdl-32wd750 kdl-43wd752 wd65_firmware xe70_firmware kd-65xe7003 kdl-40r553c kdl-40wd650 kd-55xe7003 kd-55xe7004 kdl-48wd650 kdl-49we750 r5c_firmware kdl-49wd759 kdl-48wd655 kd-49xe7002 kdl-43we753 kd-43xe7004 kdl-43wd753 wd75_firmware kdl-49wd751 kdl-49we663 kdl-43wd756 kdl-49we754 kdl-43we754 kd-49xe7004 kdl-40we660 kd-55xe7002 kdl-32r500c kdl-49we753 kdl-32r505c xf70_firmware kdl-32wd756 kdl-49wd753 kdl-49wd755 kdl-43wd754 kdl-32wd757 kdl-49wd757 kdl-32wd755 kd-43xe7003 kdl-43wd757 kdl-43we750 kdl-32we610 kd-49xe7093 kdl-49we665 kdl-32wd752 kd-55xe7000 kd-65xe7004 kd-55xe7096 kdl-32wd751 kdl-40wd655 kdl-49we660 kd-49xe7005 kdl-43wd758 kdl-40r550c kd-43xe7096 kd-65xe7096 kd-43xe7077 kdl-49we755 kd-43xe7005 kdl-48wd653 kdl-40wd653 kd-43xe7073 kd-65xe7002 kd-49xe7000 kdl-49wd750 we75_firmware we6_firmware kdl-40we665 kdl-43wd759 kd-49xe7096 kdl-49wd752 kdl-32we615 kdl-43wd755 kdl-43we755 xf70 kd-49xe7077 kd-55xe7073 kdl-32we613 kdl-40we663 wf6_firmware kdl-43wd750 n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2019-8389

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-4.84% / 89.12%

7 Day CHG~0.00%

Published-17 Feb, 2019 | 03:00

Updated-04 Aug, 2024 | 21:17

A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder (with a crafted ../ payload) to the download.script endpoint. This will create a MusicPlayerArchive.zip archive that is publicly accessible and includes the content of any requested file (such as the /etc/passwd file).

Vendor-musicloud_project n/a

Product-musicloud n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2012-5969

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs