H3C Wireless Controller and Access Point vsftpd Misconfiguration Vulnerability Leading to Root Ownership of FTP Uploads

A misconfiguration vulnerability has been identified in the H3C M102G HM1A0V200R010 wireless controller and the BA1500L SWBA1A0V100R006 wireless access point. This vulnerability involves vsftpd, where files uploaded anonymously via FTP are automatically assigned to the root user. As a result, remote attackers could potentially gain root-level control over the affected devices.

Impact

Exploitation of this vulnerability allows remote attackers to gain root-level control over the affected devices.