H3C SecCenter SMP Path Traversal Vulnerability in Download Function

A path traversal vulnerability has been identified in H3C SecCenter SMP-E1114P02 versions prior to 20250513. This vulnerability affects the download function of the file '/cfgFile/1/download', where improper validation of the 'Name' argument allows for directory traversal. As a result, an attacker can remotely exploit this issue to access arbitrary files on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized file access on the server, potentially allowing attackers to read sensitive information.