A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023.
A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- H3C
- Product
- ICG2000 Unified Communication Gateway
- CVSS v3.1
- 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Exploitation
- public exploit code reported
- Weakness
- CWE-287, CWE-306
- Exposure class
- Edge / VPN / firewall
- NVD status
- Deferred
Why it ranks 42 (Notable)
- Public exploit code reported
- CVSS v3.1 5.3 medium
- Exposed product class: edge / VPN / firewall
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.