CVE-2025-57577

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of...

CVE-2025-57577

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of...

CVE-2025-57578

An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57577

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of...

CVE-2025-57577

CVE-2025-57577 affects H3C Device R365V300R004, where remote attackers could execute arbitrary code via the default password. The issue stems from not changing initial credentials, enabling code execution over the network. Practical impact is high: full system compromise if exploited. Remediation...

PT-2025-37335

Name of the Vulnerable Software and Affected Versions: H3C Device versions R365V300R004 Description: An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. Recommendations: Change the default password for H3C Device version R365V300R004...

PT-2025-37323

Name of the Vulnerable Software and Affected Versions: H3C Magic M Device versions M2V100R006 Description: An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code by using the default password. Recommendations: Change the default password for H3C Magic M Devic...

CVE-2025-8907

A vulnerability was found in H3C M2 NAS V100R006. Affected by this vulnerability is an unknown functionality of the component Webserver Configuration. The manipulation leads to execution with unnecessary privileges. An attack has to be approached locally. The complexity of an attack is rather hig...

CVE-2025-8907 H3C M2 NAS Webserver Configuration unnecessary privileges

A vulnerability was found in H3C M2 NAS V100R006. Affected by this vulnerability is an unknown functionality of the component Webserver Configuration. The manipulation leads to execution with unnecessary privileges. An attack has to be approached locally. The complexity of an attack is rather hig...

CVE-2025-8907 H3C M2 NAS Webserver Configuration unnecessary privileges

A vulnerability was found in H3C M2 NAS V100R006. Affected by this vulnerability is an unknown functionality of the component Webserver Configuration. The manipulation leads to execution with unnecessary privileges. An attack has to be approached locally. The complexity of an attack is rather hig...

PT-2025-32986 · H3C · H3C M2 Nas

Name of the Vulnerable Software and Affected Versions: H3C M2 NAS version V100R006 Description: A vulnerability exists in the Webserver Configuration component of H3C M2 NAS version V100R006. The vulnerability allows for execution with unnecessary privileges through manipulation. An attack must b...

CVE-2025-44653

In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44653

In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44653

In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...

H3C GR2200 安全漏洞

The H3C GR2200 is a high-performance enterprise router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR2200 MiniGR1A0V100R016 version, which stems from the USERLIMITGLOBAL option being set to 0, which could lead to a denial of service attack...

CVE-2025-44653

In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...

CVE-2025-44653

In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...

PT-2025-30316 · H3C · H3C Gr2200 Minigr1A0V100R016

Name of the Vulnerable Software and Affected Versions: H3C GR2200 MiniGR1A0V100R016 Description: The USERLIMIT GLOBAL option is set to 0 in the /etc/bftpd.conf file. This configuration can lead to denial-of-service DoS attacks due to the possibility of unlimited user connections. Recommendations:...

CVE-2025-44653

CVE-2025-44653 affects the H3C GR2200 MiniGR1A0V100R016. The root cause is that the USERLIMIT_GLOBAL option is set to 0 in /etc/bftpd.conf, which can allow unlimited user connections and lead to DoS. In the available connected documents, this DoS impact is consistently described; exploitation sta...

CVE-2025-44653

In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...