Cloudanix VulnDB

CVE-2019-25465

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Mar 11, 2026

CISA due date

—

The record

Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and network configuration parameters including usernames, passwords, and DNS settings.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities