CVE-2025-60262
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Description
An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote attackers could gain root-level control over the devices.
Affected (2)
Products: H3c: Mc102 G Firmware, Magic Ba1500l Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version hm1a0v200r010 |
| Running on/with | Platform Versions |
|---|---|
H3c Mc102 G | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version swba1a0v100r006 |
| Running on/with | Platform Versions |
|---|---|
H3c Magic Ba1500l | All versions |
References (2)
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Timeline
No history available yet.