H3C SecCenter SMP Path Traversal Vulnerability in downloadSoftware Function
Vulnerability
A path traversal vulnerability has been identified in H3C SecCenter SMP-E1114P02 versions prior to 20250513. This vulnerability affects the downloadSoftware function within the file /cfgFile/downloadSoftware. By manipulating the filename argument, it is possible to traverse directories and access any file on the server. The vulnerability can be exploited remotely.
Impact
Exploitation of this vulnerability allows for arbitrary file reading on the server, potentially leading to the disclosure of sensitive information.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.