CVE-2025-5160: H3C SecCenter SMP-E1114P02 download path traversal
A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected is the function Download of the file /packetCaptureStrategy/download. The manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5160?
CVE-2025-5160 is classified as a problematic vulnerability.
What products are affected by CVE-2025-5160?
CVE-2025-5160 affects H3C SecCenter SMP-E1114P02 up to version 20250513.
What type of attack can be executed using CVE-2025-5160?
CVE-2025-5160 allows for a path traversal attack through manipulation of the Download function.
How do I fix CVE-2025-5160?
To mitigate CVE-2025-5160, update the H3C SecCenter SMP-E1114P02 to a version later than 20250513.
What is the impact of exploiting CVE-2025-5160?
Exploitation of CVE-2025-5160 can potentially lead to unauthorized access to sensitive files on the affected system.