CVE-2025-5158

CVE-2025-5158 concerns H3C SecCenter SMP-E1114P02 (up to 20250513). The vulnerability is in the function downloadSoftware of /cfgFile/downloadSoftware, where manipulating the filename parameter enables path traversal. The issue can be exploited remotely and the exploit has been disclosed publicly...