Remote Code Execution Vulnerability in H3C Device R365V300R004
CVE-2025-57577
8HIGH
What is CVE-2025-57577?
A security flaw in H3C Device R365V300R004 enables remote attackers to execute arbitrary code by exploiting the device's default password settings. This vulnerability exposes organizations to significant risks, as attackers could gain control of the affected devices, potentially leading to unauthorized access and manipulation of sensitive data. It is crucial for users of H3C devices to update their passwords immediately and apply any available security patches to mitigate this risk.
References
CVSS V3.1
Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved