References https://github.com/adysec/POC/blob/main/wpoc/H3C/H3C-SecPath%E4%B8%8B%E4%B8%80%E4%BB%A3%E9%98%B2%E7%81%AB%E5%A2%99local_cert_delete_both%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://zhiliao.h3c.com/questions/dispcont/274851 https://zhiliao.h3c.com/questions/dispcont/272106 https://zhiliao.h3c.com/questions/dispcont/272095 https://zhiliao.h3c.com/Questions/dispcont/272096
Related VulnerabilitiesPoCh3c-secpath-firewall-file-read: H3C SecPath下一代防火墙 sys_dia_data_check 任意文件下载漏洞H3C SecPath 下一代防火墙 未授权 local_cert_delete_both 任意文件上传漏洞H3C 下一代防火墙 local_cert_delete_both 存在任意文件上传漏洞H3C SecPath A2000-AK 运维审计系统dr_operation.php 任意命令执行H3C SecPath 堡垒机 gui_detail_view.php 任意用户登录漏洞