Description
H3C ER Series是中国新华三（H3C）公司的一系列路由器。 H3C ER Series 存在路径遍历漏洞，该漏洞源于 /userLogin.asp 的部分代码可能导致路径遍历。
H3C ER Series 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cn-sec.com/archives/5047642.html
https://vulnerability.circl.lu/vuln/fkie_cve-2023-5142
https://www.cve.news/cve-2023-5142/amp/
https://zone.ci/vulns/msec/307897.html
https://zhiliao.h3c.com/questions/dispcont/295117
https://www.cve.org/CVERecord?id=CVE-2023-5142
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/H3C-%E4%BC%81%E4%B8%9A%E8%B7%AF%E7%94%B1%E5%99%A8%EF%BC%88ER%E3%80%81ERG2%E3%80%81GR%E7%B3%BB%E5%88%97%EF%BC%89%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E7%99%BB%E5%BD%95%E6%BC%8F%E6%B4%9E.md
https://vuldb.com/?id=240238