Record status Published
Identifier year (not publication year) 2023
Source publication Sep 24, 2023
Source updated Aug 2, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) H3C ER6300G2 Config File userLogin.asp path traversal
A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
GR-1100-P
Vendor H3C
Product GR-1100-P
Platforms Unknown
Default status Unknown
GR-1100-P · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
GR-1108-P
Vendor H3C
Product GR-1108-P
Platforms Unknown
Default status Unknown
GR-1108-P · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
GR-1200W
Vendor H3C
Product GR-1200W
Platforms Unknown
Default status Unknown
GR-1200W · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
GR-1800AX
Vendor H3C
Product GR-1800AX
Platforms Unknown
Default status Unknown
GR-1800AX · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
GR-2200
Vendor H3C
Product GR-2200
Platforms Unknown
Default status Unknown
GR-2200 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
GR-3200
Vendor H3C
Product GR-3200
Platforms Unknown
Default status Unknown
GR-3200 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
GR-5200
Vendor H3C
Product GR-5200
Platforms Unknown
Default status Unknown
GR-5200 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
GR-8300
Vendor H3C
Product GR-8300
Platforms Unknown
Default status Unknown
GR-8300 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
ER2100n
Vendor H3C
Product ER2100n
Platforms Unknown
Default status Unknown
ER2100n · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
ER2200G2
Vendor H3C
Product ER2200G2
Platforms Unknown
Default status Unknown
ER2200G2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
ER3200G2
Vendor H3C
Product ER3200G2
Platforms Unknown
Default status Unknown
ER3200G2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
ER3260G2
Vendor H3C
Product ER3260G2
Platforms Unknown
Default status Unknown
ER3260G2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
ER5100G2
Vendor H3C
Product ER5100G2
Platforms Unknown
Default status Unknown
ER5100G2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
ER5200G2
Vendor H3C
Product ER5200G2
Platforms Unknown
Default status Unknown
ER5200G2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed
ER6300G2
Vendor H3C
Product ER6300G2
Platforms Unknown
Default status Unknown
ER6300G2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20230908 affectedUnavailable Unavailable Unavailable None listed