PT-2022-22229
CVE-2022-34598
·
Published
2022-07-06
·
Updated
2022-07-14
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
H3C Magic R100 versions V200R004 through V100R005
Description
The issue allows attackers to execute arbitrary commands due to the udpserver having the 9034 port opened.
Recommendations
For versions V200R004 and V100R005, consider restricting access to the 9034 port as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾