CVE-2015-8228: Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200...

Security readout for executives and security teams

CVE-2015-8228 affects the SFTP server on multiple Huawei AR router families. An authenticated remote user could traverse directories and access directories outside the intended SFTP path. The public record does not provide CVSS scoring, exploit detail, or evidence of active exploitation. Exposure is most likely where affected Huawei AR routers run vulnerable software and have SFTP enabled for administrative or file-transfer access. Internet-reachable or broadly reachable SFTP management paths raise concern, especially with shared, stale, or third-party credentials. Handle this as a targeted infrastructure hygiene issue, not a confirmed emergency. Prioritize routers exposing SFTP beyond tightly controlled management networks, then upgrade or restrict access according to Huawei guidance. Mitigation focus: Identify affected Huawei AR router models and software versions.; Upgrade vulnerable routers to V200R006SPH003 or later where vendor guidance confirms availability.; Restrict SFTP access to trusted management networks only..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.