CVE-2023-5142

Summary

CVE-2023-5142 is a newly disclosed vulnerability affecting various H3C networking products, including the GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2, and ER6300G2, up to version 20230908. The vulnerability lies in the unknown code of the component Config File Handler's /userLogin.asp file and leads to a path traversal issue. This issue can be exploited remotely with a rather high complexity and difficulty. The exploit has been disclosed to the public, increasing the risk of potential attacks. Notably, the vendor did not respond to early disclosure attempts. (VDB-240238 is the identifier assigned to this vulnerability.)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.