github - ghsa-cmhm-c9j2-c4m6

ghsa-cmhm-c9j2-c4m6

Vulnerability from github

Published

2023-09-25 00:30

Modified

2023-09-25 00:30

Severity ?

3.7 (Low) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-5142"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-09-24T22:15:10Z",
    "severity": "LOW"
  },
  "details": "A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
  "id": "GHSA-cmhm-c9j2-c4m6",
  "modified": "2023-09-25T00:30:14Z",
  "published": "2023-09-25T00:30:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5142"
    },
    {
      "type": "WEB",
      "url": "https://github.com/CJCniubi666/H3C-ER/blob/main/README.md"
    },
    {
      "type": "WEB",
      "url": "https://github.com/yinsel/CVE-H3C-Report"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/?ctiid.240238"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/?id.240238"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2023-5142 (GCVE-0-2023-5142)

Vulnerability from cvelistv5

Published

2023-09-24 22:00

Modified

2024-08-02 07:52

Severity ?

3.7 (Low) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
3.7 (Low) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-22 - Path Traversal

Summary

References

▼	URL	Tags
	https://vuldb.com/?id.240238	vdb-entry, technical-description
	https://vuldb.com/?ctiid.240238	signature, permissions-required
	https://github.com/yinsel/CVE-H3C-Report	broken-link, exploit
	https://github.com/CJCniubi666/H3C-ER/blob/main/README.md	related

Impacted products

Vendor

Product

Version

▼

H3C

GR-1100-P

Version: 20230908

H3C	GR-1108-P	Version: 20230908
H3C	GR-1200W	Version: 20230908
H3C	GR-1800AX	Version: 20230908
H3C	GR-2200	Version: 20230908
H3C	GR-3200	Version: 20230908
H3C	GR-5200	Version: 20230908
H3C	GR-8300	Version: 20230908
H3C	ER2100n	Version: 20230908
H3C	ER2200G2	Version: 20230908
H3C	ER3200G2	Version: 20230908
H3C	ER3260G2	Version: 20230908
H3C	ER5100G2	Version: 20230908
H3C	ER5200G2	Version: 20230908
H3C	ER6300G2	Version: 20230908

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:52:07.533Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "technical-description",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?id.240238"
          },
          {
            "tags": [
              "signature",
              "permissions-required",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?ctiid.240238"
          },
          {
            "tags": [
              "broken-link",
              "exploit",
              "x_transferred"
            ],
            "url": "https://github.com/yinsel/CVE-H3C-Report"
          },
          {
            "tags": [
              "related",
              "x_transferred"
            ],
            "url": "https://github.com/CJCniubi666/H3C-ER/blob/main/README.md"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "GR-1100-P",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "GR-1108-P",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "GR-1200W",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "GR-1800AX",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "GR-2200",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "GR-3200",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "GR-5200",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "GR-8300",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "ER2100n",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "ER2200G2",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "ER3200G2",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "ER3260G2",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "ER5100G2",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "ER5200G2",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        },
        {
          "modules": [
            "Config File Handler"
          ],
          "product": "ER6300G2",
          "vendor": "H3C",
          "versions": [
            {
              "status": "affected",
              "version": "20230908"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "yinsel975 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
        },
        {
          "lang": "de",
          "value": "In H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 bis 20230908 wurde eine Schwachstelle entdeckt. Sie wurde als problematisch eingestuft. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /userLogin.asp der Komponente Config File Handler. Durch das Beeinflussen mit unbekannten Daten kann eine path traversal-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Die Komplexit\u00e4t eines Angriffs ist eher hoch. Das Ausnutzen gilt als schwierig. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 2.6,
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Path Traversal",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-13T08:03:35.039Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/?id.240238"
        },
        {
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.240238"
        },
        {
          "tags": [
            "broken-link",
            "exploit"
          ],
          "url": "https://github.com/yinsel/CVE-H3C-Report"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://github.com/CJCniubi666/H3C-ER/blob/main/README.md"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-09-24T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2023-09-24T00:00:00.000Z",
          "value": "CVE reserved"
        },
        {
          "lang": "en",
          "time": "2023-09-24T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2023-10-14T17:43:30.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "H3C ER6300G2 Config File userLogin.asp path traversal"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2023-5142",
    "datePublished": "2023-09-24T22:00:06.432Z",
    "dateReserved": "2023-09-24T14:06:15.230Z",
    "dateUpdated": "2024-08-02T07:52:07.533Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted