CVE-2025-5161 - H3C SecCenter SMP-E1114P02 download operationDailyOut path traversal

Back Back to CVE browser

MEDIUM

H3C SecCenter SMP-E1114P02 download operationDailyOut path traversal

Published May 26, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.79%

Description

A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulnerability is the function operationDailyOut of the file /safeEvent/download. The manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor H3C Product SecCenter SMP-E1114P02 Default
n/a
- Version
  20250513
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

H3C

SecCenter SMP-E1114P02

n/a

Version	Status	Constraints
20250513	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16252
Advisory
https://flowus.cn/share/d78abd42-5de8-45f1-a941-a11a2581be0c?code=G8A6P3
exploitPermissions Required
https://vuldb.com/?ctiid.310249
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.310249
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.578678
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16252		Advisory
https://flowus.cn/share/d78abd42-5de8-45f1-a941-a11a2581be0c?code=G8A6P3		exploitPermissions Required
https://vuldb.com/?ctiid.310249		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.310249		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.578678		third-party-advisoryThird Party AdvisoryVDB Entry