CVE-2026-3943: H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection
A vulnerability was found in H3C ACG1000-AK230 up to 20260227. This affects an unknown part of the file /webui/?aaaportalauthlocalsubmit. The manipulation of the argument suffix results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor is investigating and remediating this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3943?
CVE-2026-3943 is classified as a critical vulnerability due to its potential for command injection.
How do I fix CVE-2026-3943?
To fix CVE-2026-3943, update the H3C ACG1000-AK230 to a version later than 20260227.
What does CVE-2026-3943 affect?
CVE-2026-3943 affects the H3C ACG1000-AK230 model specifically in relation to the '/webui/?aaa_portal_auth_local_submit' file.
Can CVE-2026-3943 be exploited remotely?
Yes, CVE-2026-3943 can be exploited remotely if the attacker can manipulate the argument suffix.
Are there any mitigation strategies for CVE-2026-3943?
Mitigation strategies for CVE-2026-3943 include applying security patches and restricting access to vulnerable services.