CVE-2025-5159

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue affects the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely. The exploit has...

CVE-2025-5159

creationtimestamp| type| source ---|---|--- 2025-05-25 23:46:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17517 2025-05-26 03:30:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq2adqwdjs2w...

CVE-2025-5159

CVE-2025-5159 affects H3C SecCenter SMP-E1114P02 up to 20250513. The issue is a path traversal in the Download function for /cfgFile/1/download caused by manipulation of the Name parameter. It can be initiated remotely, and the exploit has been disclosed publicly. Multiple sources corroborate the...