H3C SecCenter SMP Path Traversal Vulnerability in Packet Capture Strategy Download Function
Vulnerability
A path traversal vulnerability has been identified in H3C SecCenter SMP-E1114P02 versions prior to 20250513. The issue arises in the packetCaptureStrategy download function, where improper validation of the 'Name' argument allows remote attackers to traverse directories and access arbitrary files on the server.
Impact
Exploitation of this vulnerability could lead to unauthorized file access on the server, potentially allowing attackers to read sensitive information or system files.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.6remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.