PT-2022-22229 · H3C · H3C Magic R100

Published 2022-07-06 · Updated 2022-07-14 · CVE-2022-34598

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions H3C Magic R100 versions V200R004 through V100R005

Description The issue allows attackers to execute arbitrary commands due to the udpserver having the 9034 port opened.

Recommendations For versions V200R004 and V100R005, consider restricting access to the 9034 port as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-34598

Affected Products

H3C Magic R100

References · 4

• 🔥❌ https://github.com/zhefox/IOT_Vul/tree/main/H3C/H3CR100/1 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2022-34598 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34598 · Vendor Advisory
• https://t.me/cibsecurity/45685 · Telegram Post