A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /us
A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated…
| Vendor | Product | Versions |
|---|---|---|
| H3C | GR | 1100-P — 20230908 |
| H3C | GR | 1108-P — 20230908 |
| H3C | GR | 1200W — 20230908 |
| H3C | GR | 1800AX — 20230908 |
| H3C | GR | 2200 — 20230908 |
| H3C | GR | 3200 — 20230908 |
| H3C | GR | 5200 — 20230908 |
| H3C | GR | 8300 — 20230908 |
| H3C | ER2100n | 20230908 |
| H3C | ER2200G2 | 20230908 |
| H3C | ER3200G2 | 20230908 |
| H3C | ER3260G2 | 20230908 |
| H3C | ER5100G2 | 20230908 |
| H3C | ER5200G2 | 20230908 |
| H3C | ER6300G2 | 20230908 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.