CVE-2019-25465 - Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal

Back Back to CVE browser

HIGH

Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal

Published Mar 11, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.50%

Description

Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and network configuration parameters including usernames, passwords, and DNS settings.

Affected products

Vendor Hisilicon Product HiIpcam Default
unaffected
- Version
  V100R003
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Hisilicon

HiIpcam

unaffected

Version	Status	Constraints
V100R003	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-260

References (2)

https://www.exploit-db.com/exploits/47405
exploit
https://www.vulncheck.com/advisories/hisilicon-hiipcam-v100r003-information-disclosure-via-directory-traversal
third-party-advisory

Link	Providers	Tags
https://www.exploit-db.com/exploits/47405		exploit
https://www.vulncheck.com/advisories/hisilicon-hiipcam-v100r003-information-disclosure-via-directory-traversal		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulnCheck

Published Mar 11, 2026

Updated Apr 7, 2026

Reserved Feb 22, 2026

Link CVE-2019-25465

CISA Vulnrichment

Updated Mar 11, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2019-25465

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-25465