CVE-2025-5159: H3C SecCenter SMP-E1114P02 download path traversal
A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue affects the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5159?
CVE-2025-5159 has been rated as problematic.
What vulnerability does CVE-2025-5159 exploit?
CVE-2025-5159 exploits a path traversal vulnerability due to improper handling of the argument Name.
How does an attacker exploit CVE-2025-5159?
An attacker can exploit CVE-2025-5159 by initiating a remote attack through the Download function of the file /cfgFile/1/download.
What software versions are affected by CVE-2025-5159?
CVE-2025-5159 affects H3C SecCenter SMP-E1114P02 up to and including version 20250513.
How do I fix CVE-2025-5159?
To fix CVE-2025-5159, upgrade the H3C SecCenter SMP-E1114P02 to a version released after 20250513 that addresses this vulnerability.