CVE-2022-45963

h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability

Critical · published December 27, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
52.3
In the wild
Unconfirmed
What it is

🔥 A sneaky privilege bypass lurks in H3C firewalls version 3.10 and below! This is a big deal! Think of it like a crowded nightclub where the bouncer lets anyone through the VIP entrance without checking their ID — suddenly, anyone can access the exclusive areas and do whatever they want! If an attacker exploits this vulnerability, they could gain unauthorized access to critical settings and controls of your firewall, potentially compromising your entire network security. This could lead to data breaches, unauthorized changes, and a whole lot of chaos!

Put simply

Think of it like a crowded nightclub where the bouncer lets anyone through the VIP entrance without checking their ID — suddenly, anyone can access the exclusive areas and do whatever they want! This privilege bypass vulnerability in the H3C firewall allows attackers to elevate their permissions, giving them access to sensitive functions without proper authentication. Essentially, it's a weakness in the access control mechanism that could be easily manipulated.

What to do

If an attacker exploits this vulnerability, they could gain unauthorized access to critical settings and controls of your firewall, potentially compromising your entire network security. This could lead to data breaches, unauthorized changes, and a whole lot of chaos! Immediately update your H3C firewall to version 3.10.1 or higher to close this loophole. Reviewing your current firewall configurations and monitoring access logs for unusual activity is also a smart move! You've got this! Patch that firewall, and you'll be stepping up your security game in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00690 · 52.3th percentile
Published
2022-12-27T00:00Z
EPSS history
Timeline
  • 27 DEC 00:00Z
    h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability
    cvelistv5