Denial of Service Vulnerability in H3C GR2200 Products
CVE-2025-44653
7.5HIGH
What is CVE-2025-44653?
A configuration issue in the H3C GR2200 MiniGR1A0V100R016 allows an attacker to exploit the USERLIMIT_GLOBAL option, which is set to 0 in the /etc/bftpd.conf file. This misconfiguration can enable an attacker to carry out Denial of Service (DoS) attacks by overloading the device with connections, effectively disrupting service for legitimate users and compromising system stability.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved