PT-2023-19397 · H3C · H3C A210-G

Published 2023-02-22 · Updated 2023-03-03 · CVE-2023-24093

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions H3C A210-G version A210-GV100R005

Description The issue is related to access control, allowing attackers to authenticate without a password.

Recommendations For H3C A210-G version A210-GV100R005, consider restricting access to the device until a patch or fix is available to address the access control issue. As a temporary workaround, review and enforce strong password policies and multi-factor authentication to minimize the risk of unauthorized access.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-24093

Affected Products

H3C A210-G

References · 3

• 🔥 https://blog.luckytain.com/?p=66 · Exploit
• https://osv.dev/vulnerability/CVE-2023-24093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-24093 · Security Note