Sign-up

ID

VAR-202104-1992


TITLE

Multiple series routers of New H3C Technology Co., Ltd. have weak password vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2021-17388

DESCRIPTION

New H3C Technology Co., Ltd. was established on September 26, 2003. Legal representative Yu Yingtao, the company's business scope includes: technology development, technical services, technical consulting, achievement transfer, production, sales: electronic products, software, (data) communication equipment, broadband access equipment, network security equipment, gateways, Computers, servers, storage devices, intelligent technology equipment, smart home equipment, cloud computing products, Internet information technology products, etc. Many series routers of New H3C Technology Co., Ltd. have weak password vulnerabilities, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2021-17388

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-17388

AFFECTED PRODUCTS

vendor:new h3cmodel:er3260g2 router erhmg2-mnw100-r1116 /0.0.0.7 /verscope: - version: -

Trust: 0.6

vendor:new h3cmodel:er2200g2 router erg2aw-mnw100-r1107bootrom /0.0.0.4 /ver.ascope: - version: -

Trust: 0.6

vendor:h3cmodel:er3100 router er3100v201r020 /1.1.1.6 /ver.bscope: - version: -

Trust: 0.6

vendor:new h3cmodel:er3200g2 router erhmg2-mnw100-r1117 /0.0.0.7 /ver.ascope: - version: -

Trust: 0.6

vendor:h3cmodel:er5200 router er5200v201r014 /1.1.1.7 /ver.bscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2021-17388

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-17388
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-17388
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-17388

EXTERNAL IDS

db:CNVDid:CNVD-2021-17388

Trust: 0.6

sources: CNVD: CNVD-2021-17388

SOURCES

db:CNVDid:CNVD-2021-17388

LAST UPDATE DATE

2022-05-04T10:21:13.958000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-17388date:2021-03-15T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-17388date:2021-04-06T00:00:00