CVE-2023-5142
Estado: ModificadaMedia (5.3)—
A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.72%
- Percentil entre todas las CVEs puntuadas: 86
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (15)
H3C — Er2100n FirmwareH3C — Er2200g2 FirmwareH3C — Er3200g2 FirmwareH3C — Er3260g2 FirmwareH3C — Er5100g2 FirmwareH3C — Er5200g2 FirmwareH3C — Er6300g2 FirmwareH3C — Gr-1100-p FirmwareH3C — Gr-1108-p FirmwareH3C — Gr-1200w FirmwareH3C — Gr-1800ax FirmwareH3C — Gr-2200 FirmwareH3C — Gr-3200 FirmwareH3C — Gr-5200 FirmwareH3C — Gr-8300 Firmware
CWE
- CWE-22
- CWE-22
Referencias
- https://github.com/CJCniubi666/H3C-ER/blob/main/README.md
- https://github.com/yinsel/CVE-H3C-Report
- https://vuldb.com/?ctiid.240238
- https://vuldb.com/?id.240238
- https://github.com/CJCniubi666/H3C-ER/blob/main/README.md
- https://github.com/yinsel/CVE-H3C-Report
- https://vuldb.com/?ctiid.240238
- https://vuldb.com/?id.240238
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-5142",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"cvssData": {
"version": "2.0",
"baseScore": 2.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 3.7,
"attackVector": "NETWORK",
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 2.2
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cna@vuldb.com",
"affectedData": [
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "GR-1100-P",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "GR-1108-P",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "GR-1200W",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "GR-1800AX",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "GR-2200",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "GR-3200",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "GR-5200",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "GR-8300",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "ER2100n",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "ER2200G2",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "ER3200G2",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "ER3260G2",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "ER5100G2",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "ER5200G2",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
},
{
"vendor": "H3C",
"modules": [
"Config File Handler"
],
"product": "ER6300G2",
"versions": [
{
"status": "affected",
"version": "20230908"
}
]
}
]
}
],
"published": "2023-09-24T22:15:10.087",
"references": [
{
"url": "https://github.com/CJCniubi666/H3C-ER/blob/main/README.md",
"tags": [
"Exploit",
"Third Party Advisory"
],
"source": "cna@vuldb.com"
},
{
"url": "https://github.com/yinsel/CVE-H3C-Report",
"tags": [
"Exploit",
"Third Party Advisory"
],
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.240238",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.240238",
"tags": [
"Third Party Advisory"
],
"source": "cna@vuldb.com"
},
{
"url": "https://github.com/CJCniubi666/H3C-ER/blob/main/README.md",
"tags": [
"Exploit",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/yinsel/CVE-H3C-Report",
"tags": [
"Exploit",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://vuldb.com/?ctiid.240238",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://vuldb.com/?id.240238",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "es",
"value": "Una vulnerabilidad clasificada como problemática fue encontrada en H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2 , ER3260G2, ER5100G2, ER5200G2 y ER6300G2 hasta 20230908. Esta vulnerabilidad afecta a código desconocido del archivo /userLogin.asp del componente Config File Handler. La manipulación conduce al recorrido del camino. El ataque se puede iniciar de forma remota. La complejidad de un ataque es bastante alta. La explotación parece difícil. El exploit ha sido divulgado al público y puede utilizarse. VDB-240238 es el identificador asignado a esta vulnerabilidad. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera."
}
],
"lastModified": "2026-06-17T06:47:38.077",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:gr-1100-p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D840020D-2C49-4208-BA79-9BF9C4EBA4D9",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:gr-1100-p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FA2A23D8-5DF5-4647-AB32-AF86E117789F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:gr-1108-p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A33D38D0-144E-4576-96F5-D184485EF455",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:gr-1108-p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E432A5DB-5D0F-464F-8235-EB9543E3F06A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:gr-1200w_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94126EC2-0D0B-46F3-8CF6-3E1C42D7D100",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:gr-1200w:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C4ECDCE3-0655-43A0-A6C5-658E7C4F5470"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:gr-1800ax_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19B18747-B268-45AB-A254-64DCB72C109B",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:gr-1800ax:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "435BF35B-1867-48E5-BC8C-3F868E9B419B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:gr-2200_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75F33539-7670-4732-B470-4AB11816E549",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:gr-2200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8543B702-DF8C-435F-A39E-56C8043E4321"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:gr-3200_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D94AFA76-7869-4B48-B22B-AAC0AE7D7960",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:gr-3200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "945172AA-02BE-4538-952C-3F2EF9749810"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:gr-5200_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D61370D-1950-4AA3-A6A2-CFE9A199CAE8",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:gr-5200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "55A3F347-7936-4966-9C0B-D61CC92BA85A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:gr-8300_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A545124C-076D-46E7-96B2-4B8CFF2BEFB8",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:gr-8300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7AB46F02-E18F-4E67-A941-FE24C06C2CFC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:er3260g2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60B2DE7C-598B-4002-BB42-EC2D7E129FBF",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:er3260g2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D6504103-D36F-499D-A6CE-1E952477B00F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:er5200g2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39FEFC0A-4816-419E-830C-7D2AE5C95EEF",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:er5200g2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EC97A451-6C13-4805-BF52-9C424B898636"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:er3200g2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88AC8D91-BA03-49AC-9FC7-2D3DA30E9D4D",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:er3200g2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3126DFD1-B3D2-4F01-BDB6-D22E681E3228"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:er2100n_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28BE8148-9573-4708-B5DE-6ED69AED6993",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:er2100n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "803C9117-16A7-4812-A530-82AE6B331147"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:er6300g2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A6F28D8-BA6D-497E-95AA-D35052FFBF6F",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:er6300g2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3E9CE23F-9941-471E-82CE-0EE150608E04"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:er5100g2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFDDB7BA-795A-4853-B3C6-3894DA11E69E",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:er5100g2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "11594FE2-E591-4F06-9856-751DCF3F8949"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:h3c:er2200g2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51A4E096-5A31-468B-B84B-9DDA123BEE2F",
"versionEndIncluding": "20230908"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:h3c:er2200g2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3DB4A4EC-8E98-4F3B-B116-925B15A9E5C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cna@vuldb.com"
}