Vulnerabilities

TI-2023-04730 CVE-2023-5142 · GHSA-cmhm-c9j2-c4m6

H3C ER6300G2 Config File userLogin.asp path traversal

LOW 29

A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0272 Published 2023-09-24 No fix listed CWE-22

TI-2023-13966 CVE-2023-29696 · GHSA-cqq9-f2v9-9347

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set.

HIGH 82

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-05-08 No fix listed CWE-787

TI-2023-13965 CVE-2023-29693 · GHSA-wv9h-wp9q-jhcq

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad.

HIGH 82

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-05-08 No fix listed CWE-787

TI-2022-17265 CVE-2022-37074 · GHSA-3w9p-x4pg-9hc2

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set.

LOW 35

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00553 Published 2022-08-25 No fix listed CWE-787

TI-2022-17263 CVE-2022-37072 · GHSA-78jj-qvg7-6h49

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-17264 CVE-2022-37073 · GHSA-g62f-wr6c-jm2f

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-17262 CVE-2022-37071 · GHSA-w8jp-37q4-q79r

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-16840 CVE-2022-36519 · GHSA-63j5-39hj-hprm

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01214 Published 2022-08-25 No fix listed CWE-787

TI-2022-17261 CVE-2022-37070 · GHSA-mm8h-c8f9-43h5

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection…

MEDIUM 55

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10489 Published 2022-08-25 No fix listed CWE-78

TI-2022-17260 CVE-2022-37069 · GHSA-pxgw-798v-h988

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-17259 CVE-2022-37068 · GHSA-4r3v-qx86-963c

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-17258 CVE-2022-37067 · GHSA-wc98-2cmj-7w9m

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-17257 CVE-2022-37066 · GHSA-7gcv-jcm7-qcc8

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-16841 CVE-2022-36520 · GHSA-jw84-p8mv-c79v

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-16839 CVE-2022-36518 · GHSA-6cx9-mw6f-w3pj

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01214 Published 2022-08-25 No fix listed CWE-787

TI-2022-16837 CVE-2022-36516 · GHSA-8p7w-cmwv-fhh6

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-16838 CVE-2022-36517 · GHSA-xgr7-3fmq-x97v

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-16836 CVE-2022-36515 · GHSA-9p3c-wgh9-g4x4

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-16835 CVE-2022-36514 · GHSA-3fcx-583q-ffvw

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan.

MEDIUM 44

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-08-25 No fix listed CWE-787

TI-2022-16834 CVE-2022-36513 · GHSA-r56p-cpvv-hp2f

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist.

HIGH 75

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01214 Published 2022-08-25 No fix listed CWE-787

TI-2022-16833 CVE-2022-36511 · GHSA-pcp3-7g28-42wg

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo.

HIGH 75

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01214 Published 2022-08-25 No fix listed CWE-787

Vulnerabilities

Filters