CVE-2012-5969

Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbitrary files via a .. (dot dot) in the req_page parameter to en/sms.cgi.

• CWE-22

• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htmVendor Advisory
• http://www.kb.cert.org/vuls/id/871148US Government Resource
• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htmVendor Advisory
• http://www.kb.cert.org/vuls/id/871148US Government Resource

Published

Dec 19, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5963Stack-based buffer overflow in the unique_service_name funct…
• CVE-2012-5964Stack-based buffer overflow in the unique_service_name funct…
• CVE-2012-5965Stack-based buffer overflow in the unique_service_name funct…
• CVE-2012-5966The restricted telnet shell on the D-Link DSL2730U router al…
• CVE-2012-5967SQL injection vulnerability in menuXML.php in Centreon 2.3.3…
• CVE-2012-5968The Huawei E585 device does not validate the status of admin…
• CVE-2012-5970The Huawei E585 device allows remote attackers to cause a de…
• CVE-2012-5972Directory traversal vulnerability in the web server in SpecV…
• CVE-2012-5973CA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux all…
• CVE-2012-5975The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server…
• CVE-2012-5976Multiple stack consumption vulnerabilities in Asterisk Open …
• CVE-2012-5977Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.1…