CVE-2025-5158 H3C SecCenter SMP-E1114P02 downloadSoftware path traversal

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as problematic. This vulnerability affects the function downloadSoftware of the file /cfgFile/downloadSoftware. The manipulation of the argument filename leads to path traversal. The attack can be initiat...

CVE-2025-5158 H3C SecCenter SMP-E1114P02 downloadSoftware path traversal

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as problematic. This vulnerability affects the function downloadSoftware of the file /cfgFile/downloadSoftware. The manipulation of the argument filename leads to path traversal. The attack can be initiat...

CVE-2025-5158

CVE-2025-5158 concerns H3C SecCenter SMP-E1114P02 (up to 20250513). The vulnerability is in the function downloadSoftware of /cfgFile/downloadSoftware, where manipulating the filename parameter enables path traversal. The issue can be exploited remotely and the exploit has been disclosed publicly...