Directory traversal vulnerability in the SFTP server in Huawei AR 120 150 160 200 500 1200 2200 3200 and 3600 routers with software before V200R006SPH003 allows remote authenticated users to access arbitrary directories via unspecified vectors.