Sign-up

ID

VAR-202106-2207


TITLE

Three Xinhua systems have weak password vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2021-34461

DESCRIPTION

ER3100, ER5200G2, ER3260G2, ER3200G2, ER8300G2 are router products of New H3C Technology Co., Ltd. More than three systems in Xinhua have weak password vulnerabilities, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2021-34461

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-34461

AFFECTED PRODUCTS

vendor:new h3cmodel:er3100 routerscope: - version: -

Trust: 0.6

vendor:new h3cmodel:er5200g2scope: - version: -

Trust: 0.6

vendor:new h3cmodel:er3260g2scope: - version: -

Trust: 0.6

vendor:new h3cmodel:er3200g2scope: - version: -

Trust: 0.6

vendor:new h3cmodel:er8300g2scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2021-34461

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-34461
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-34461
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-34461

EXTERNAL IDS

db:CNVDid:CNVD-2021-34461

Trust: 0.6

sources: CNVD: CNVD-2021-34461

SOURCES

db:CNVDid:CNVD-2021-34461

LAST UPDATE DATE

2022-05-04T09:32:26.055000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-34461date:2021-05-14T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-34461date:2021-06-10T00:00:00