Hangzhou H3C Technologies vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Hangzhou H3C Technologies products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2022-50800 High · 7.5 CWE-203 Dec 30, 2025

H3C SSL VPN n/a Username Enumeration via Login Script Credential Verification

H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.