High severity7.5NVD Advisory· Published Jun 14, 2018· Updated Jun 17, 2026

CVE-2017-17309

Description

Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Huawei Technologies Co., Ltd./HG255s-10v5
Range: V100R001C163B025SP02
Huawei/HG255sllm-fuzzy
Range: V100R001C163B025SP02
Huawei/Hg255s 10 Firmware
cpe:2.3:o:huawei:hg255s-10_firmware:v100r001c163b025sp02:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-ennvdVendor Advisory
packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000