PT-2022-23432 · H3C · H3C Gr-2200

Published 2022-08-25 · Updated 2025-06-17 · CVE-2022-36510

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions H3C GR2200 MiniGR1A0V100R014

Description A command injection issue was discovered, which can be exploited via the param parameter at the DelL2tpLNSList endpoint.

Recommendations For H3C GR2200 MiniGR1A0V100R014, consider restricting access to the DelL2tpLNSList endpoint to minimize the risk of exploitation. Avoid using the param parameter in this endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-36510

Affected Products

H3C Gr-2200

References · 4

• 🔥 https://github.com/Darry-lang1/vuln/tree/main/H3C/GR2200/1 · Exploit
• https://osv.dev/vulnerability/CVE-2022-36510 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36510 · Security Note
• https://t.me/cvenotify/126018 · Telegram Post