CVE-2025-5160: h3c seccenter smp-1114p02

csirt@kutim:~/threat-intel/cve/CVE-2025-5160

CVSS 7.5 · High EPSS 0,79%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada h3c seccenter smp-1114p02. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected is the function Download of the file /packetCaptureStrategy/download. The manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD: 26 Mei 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari): 0,79% peluang dieksploitasi; lebih tinggi dari 55,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
h3c	seccenter smp-1114p02	Semua versi hingga 20250513

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://vuldb.com/?id.310248 advisory pihak ketiga
https://vuldb.com/?submit.576232 advisory pihak ketiga · vdb entry
https://flowus.cn/share/3cec9266-793a-498e-acdb-4296b09a8c89?code=G8A6P3 permissions required
https://vuldb.com/?ctiid.310248 permissions required · vdb entry

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.