CVE-2023-5142

LOW

H3C GR and ER Series Firmware < 20230908 - Path Traversal via /userLogin.asp Config File Handler

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-5142. PoCs published by kuangxiaotu.

AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for an unauthorized access vulnerability in H3C GR series routers. The exploit leverages a directory traversal flaw to bypass authentication and retrieve sensitive configuration files.

Description

A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Exploits (1)

nomisec WORKING POC
by kuangxiaotu · poc
https://github.com/kuangxiaotu/CVE-H3C-Report

This repository contains a functional proof-of-concept exploit for an unauthorized access vulnerability in H3C GR series routers. The exploit leverages a directory traversal flaw to bypass authentication and retrieve sensitive configuration files.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: H3C GR series router (all versions)
No auth needed
Prerequisites: Network access to the target router
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.240238
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.240238
Exploit, Third Party Advisory broken-link exploit
https://github.com/yinsel/CVE-H3C-Report

Scores

CVSS v3 3.7
EPSS 0.0232
EPSS Percentile 81.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-22
Status published
Products (15)
h3c/er2100n_firmware < 20230908
h3c/er2200g2_firmware < 20230908
h3c/er3200g2_firmware < 20230908
h3c/er3260g2_firmware < 20230908
h3c/er5100g2_firmware < 20230908
h3c/er5200g2_firmware < 20230908
h3c/er6300g2_firmware < 20230908
h3c/gr-1100-p_firmware < 20230908
h3c/gr-1108-p_firmware < 20230908
h3c/gr-1200w_firmware < 20230908
... and 5 more
Published Sep 24, 2023
Tracked Since Feb 18, 2026