Hardcoded Password Vulnerability in H3C Magic R230 Device
CVE-2024-38902

Currently unrated

Key Information:

Vendor
H3C
Status
Magic R230
Vendor
CVE Published:
24 June 2024

Summary

The H3C Magic R230 V100R002 device has been identified with a significant vulnerability due to the presence of a hardcoded password in the /etc/shadow file. This flaw allows unauthorized individuals to gain root access, posing a serious risk to the security of the device and the network it operates within. It is crucial for users to implement immediate remediation measures to safeguard their systems.

References

https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.