Approved changes feed: RSS · Atom

cpe:2.3:o:h3c:gr-1200w_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorH3C (17378f50-e353-55bc-ad2a-c62425dcc44c)
ProductGr 1200W Firmware (b7a04ee3-25a2-5e08-bf94-5b1cddf4e05d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5142 vulnerable 2026-06-08 06:19:42.630058 H3C ER6300G2 Config File userLogin.asp path traversal
LOW (3.7)
A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-09-24T22:00:06.432Z
Updated: 2024-08-02T07:52:07.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37074 vulnerable 2026-06-08 05:46:08.609075 Details available
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set.
Published: 2022-08-25T14:00:28.000Z
Updated: 2024-08-03T10:21:32.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37073 vulnerable 2026-06-08 05:46:08.608696 Details available
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti.
Published: 2022-08-25T14:00:18.000Z
Updated: 2024-08-03T10:21:32.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37072 vulnerable 2026-06-08 05:46:08.608427 Details available
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti.
Published: 2022-08-25T14:00:23.000Z
Updated: 2024-08-03T10:21:32.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37071 vulnerable 2026-06-08 05:46:08.608141 Details available
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One.
Published: 2022-08-25T14:00:18.000Z
Updated: 2024-08-03T10:21:32.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37070 vulnerable 2026-06-08 05:46:08.607773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37069 vulnerable 2026-06-08 05:46:08.607491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37068 vulnerable 2026-06-08 05:46:08.607007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37067 vulnerable 2026-06-08 05:46:08.606724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37066 vulnerable 2026-06-08 05:46:08.606438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36520 vulnerable 2026-06-08 05:46:07.500648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36519 vulnerable 2026-06-08 05:46:07.500284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36518 vulnerable 2026-06-08 05:46:07.500006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36517 vulnerable 2026-06-08 05:46:07.499554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36516 vulnerable 2026-06-08 05:46:07.499144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36515 vulnerable 2026-06-08 05:46:07.498875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36514 vulnerable 2026-06-08 05:46:07.498594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36513 vulnerable 2026-06-08 05:46:07.498131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36511 vulnerable 2026-06-08 05:46:07.497043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.