| 제목 | H3C GR series router system management has unauthorized access vulnerability |
|---|
| 설명 | The H3C GR series router is a router product of Xinhua San Technology Co., Ltd. There is an unauthorized access vulnerability in the H3C GR series system management, which can be exploited by attackers to construct special request packets to bypass identity verification and obtain sensitive information of routers.
Due to security issues, the following is a list of partial URLs for GR series routers. For specific replication steps, please refer to the reference link:
GR3200：
http://x.x.x.x:8989/
http://x.x.x.x:8989
http://x.x.x.x:8989/
GR5200：
http://x.x.x.x:8989/
http://x.x.x.x:8989/
GR-1200W：
http:// x.x.x.x:9000/
http://x.x.x.x:8989/
GR-1800AX：
http://x.x.x.x:8989/
https://x.x.x.x:1024/
GR8300：
http://x.x.x.x:8688/
http://x.x.x.x:8989/
GR1108-P：
https://x.x.x.x:8989/
http://x.x.x.x:8989/
GR2200：
http://x.x.x.x:8081/
http://x.x.x.x:8989/
GR1100-P：
http://x.x.x.x:9995/
http://x.x.x.x:8989/
|
|---|
| 원천 | ⚠️ https://github.com/yinsel/CVE-H3C-Report |
|---|
| 사용자 | yinsel975 (UID 54073) |
|---|
| 제출 | 2023. 09. 07. PM 05:23 (3 연령 ago) |
|---|
| 모더레이션 | 2023. 09. 24. PM 04:06 (17 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 240238 [H3C ER6300G2 까지 20230908 Config File /userLogin.asp 디렉토리 순회] |
|---|
| 포인트들 | 20 |
|---|