CVE-2023-5142

Summary

A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

VendorProductVersion RangeStatus
H3CGR-1100-P20230908affected
H3CGR-1108-P20230908affected
H3CGR-1200W20230908affected
H3CGR-1800AX20230908affected
H3CGR-220020230908affected
H3CGR-320020230908affected
H3CGR-520020230908affected
H3CGR-830020230908affected
H3CER2100n20230908affected
H3CER2200G220230908affected
H3CER3200G220230908affected
H3CER3260G220230908affected
H3CER5100G220230908affected
H3CER5200G220230908affected
H3CER6300G220230908affected

Weaknesses

  • CWE-22: CWE-22 Path Traversal

ADP Enrichment

CVE Program Container

Additional References

References