CVE-2025-5161: medium-severity vulnerability in H3C SecCenter SMP-E1114P02
H3C SecCenter SMP-E1114P02 download operationDailyOut path traversal
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.8%
A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulnerability is the function operationDailyOut of the file /safeEvent/download. The manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
H3C · SecCenter SMP-E1114P02Related CVEs — H3C SecCenter SMP-E1114P02
In the same product, most dangerous first.
CVE-2025-5160MEDIUMH3C SecCenter SMP-E1114P02 download path traversalEPSS 0.8%CVE-2025-5159MEDIUMH3C SecCenter SMP-E1114P02 download path traversalEPSS 0.8%CVE-2025-5158MEDIUMH3C SecCenter SMP-E1114P02 downloadSoftware path traversalEPSS 0.8%CVE-2025-5157MEDIUMH3C SecCenter SMP-E1114P02 fileContent path traversalEPSS 0.8%CVE-2025-5162MEDIUMH3C SecCenter SMP-E1114P02 importFile unrestricted uploadEPSS 0.4%