CVE-2023-24093

An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password

Critical ยท published February 22, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

๐Ÿšจ An access control flaw in H3C A210-G allows password-less authentication! Imagine a storefront where anyone can just walk in without showing any ID. ๐Ÿ”ฅ Think of it like a restaurant with a wide-open door policy โ€” if no one checks who enters, anyone can come in and order anything off the menu without a reservation. That's exactly what this vulnerability allows: unrestricted access to your system! This means attackers could waltz right in, access sensitive data, and make unauthorized changes, potentially leading to a complete compromise of your network. The consequences could be absolutely devastating, putting your entire operation at risk!

Put simply

Think of it like a restaurant with a wide-open door policy โ€” if no one checks who enters, anyone can come in and order anything off the menu without a reservation. That's exactly what this vulnerability allows: unrestricted access to your system! This vulnerability allows unauthorized users to log in to the device without needing a password, effectively bypassing authentication checks entirely. It arises from insufficient access controls in the H3C A210-G firmware.

What to do

This means attackers could waltz right in, access sensitive data, and make unauthorized changes, potentially leading to a complete compromise of your network. The consequences could be absolutely devastating, putting your entire operation at risk! To protect your system, immediately update to the latest firmware version that addresses this vulnerability. Additionally, review your access control policies and ensure only authorized personnel can access critical hardware. ๐Ÿ›ก๏ธ You can tackle this head-on! Follow these steps and lock down your system against unauthorized access. You've got this! ๐ŸŒŸ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00787 ยท 55.7th percentile
Published
2023-02-22T00:00Z
EPSS history
Timeline
  • 22 FEB 00:00Z
    An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password
    cvelistv5