H3C ERG2/GR Routers Unauthorized Access Vulnerability

Key Information Vulnerability Description Vulnerability Type: Unauthorized Access Security Vulnerability Affected Products: H3C ERG2 Series and GR Series Routers Release Date: June 5, 2025 Affected Versions H3C ERG2 Series Routers: - ERG2200G2, ERG2450W, ERG21200W, ERG21350W, NR1200W, ER3100G2, ER3200G2, ER3260G2, ER5100G2, FR5200G2, FR6300G2, FR8300G2, ER8300G2-X, GR3700, GR5200, GR3800, GR1800AX, GR3000AX, GR5400AX Affected Versions: - ERG2AW-MNW100-R1116 and earlier versions - FRHMFG2-MNW100-R1125 and earlier versions - MiniGR1B0V100R017 and earlier versions - MiniGRW1B0V100R006 and earlier versions - SWBRW1A0V100R006 and earlier versions - SWBRW1B0V100R008 and earlier versions Issue Description When remote management is enabled, attackers can exploit a special POST request to bypass the device's security authentication process and gain access to sensitive device information. Resolution Mitigation Measures: Disable remote Web management and Telnet management functions on the device (disabled by default). Solution: Upgrade to the patched versions: - ERG2AW-MNW100 R1117 - FRHMFG2-MNW100-R1126 - MiniGR1B0V100R018L50 - MiniGRW1B0V100R009L50 - SWBRW1A0V100R007L50 - SWBRW1B0V100R009L50 References Vulnerability IDs: - NVDB-TEMP-CNVDB-2025147886 - NVDB-TEMP-CNVDB-2025879630 - NVDB-TEMP-CNVDB-2025512024 - NVDB-TEMP-CNVDB-2025226817 - NVDB-TEMP-CNVDB-2025784972 Source: This vulnerability was discovered and reported by external security researcher Wang Chengcheng (winmt) from Nanjing University of Posts and Telecommunications. We thank Wang Chengcheng (winmt) for their active contribution to this vulnerability disclosure.

Goal Reached Thanks to every supporter — we hit 100%!

H3C ERG2/GR Routers Unauthorized Access Vulnerability