Authenticated directory disclosure via insufficient input validation

Insufficient input validation in Huawei Secospace USG6300 and USG6300E firmware allows remote authenticated users to read directory data. Huawei has not disclosed the affected component or the operation that fails to validate untrusted input before granting access to a specific directory. Exploitation requires network access to the device and an authenticated account with limited privileges; the reported consequence is disclosure of information from that directory.