title: H3C ER6300G2 Config File userLogin.asp path traversal
description: A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
problem types: CWE-22 Path Traversal
affected:
{
vendor: H3C
product: GR-1100-P
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: GR-1108-P
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: GR-1200W
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: GR-1800AX
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: GR-2200
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: GR-3200
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: GR-5200
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: GR-8300
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: ER2100n
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: ER2200G2
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: ER3200G2
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: ER3260G2
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: ER5100G2
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: ER5200G2
versions:
version: 20230908, status: affected
modules: Config File Handler
}
{
vendor: H3C
product: ER6300G2
versions:
version: 20230908, status: affected
modules: Config File Handler
}
metrics:
cvssV3_1: [
version: 3.1
baseScore: 3.7
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
baseSeverity: LOW
]