Remote Code Execution Vulnerability in H3C Device R365V300R004
CVE-2025-57577

8HIGH

Key Information:

Vendor

H3C
Status
Device R365V300R004
Vendor
CVE Published:
12 September 2025

What is CVE-2025-57577?

A security flaw in H3C Device R365V300R004 enables remote attackers to execute arbitrary code by exploiting the device's default password settings. This vulnerability exposes organizations to significant risks, as attackers could gain control of the affected devices, potentially leading to unauthorized access and manipulation of sensitive data. It is crucial for users of H3C devices to update their passwords immediately and apply any available security patches to mitigate this risk.

References

https://www.h3c.com/cn/
https://github.com/XXRicardo/iot-cve/blob/main/H3C/R365V3...
https://h3c.com

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-57577 : Remote Code Execution Vulnerability in H3C Device R365V300R004