Hisilicon vulnerabilities
Published CVEs affecting Hisilicon products: 1 record(s), with severity, exploitation and fixes.
CVE-2019-25465
High · 7.5
CWE-260 Mar 11, 2026
Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal
Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and network configuration parameters including usernames, passwords, and DNS settings.