In H3C MagicR100 =V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack...
7.5CVSS7AI score0.01165EPSS
SaveExploits1References2
OSV•added 2022/05/04 4:15 p.m.•12 views
CVE-2022-28940
In H3C MagicR100 =V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack...