Vulnerability Description
An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of misconfiguration if an administrator deliberately ignored the prompts, which is outside the scope of CVE definitions."
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/XXRicardo/iot-cve/blob/main/H3C/R365V300R004.md
- https://h3c.com
- https://www.h3c.com/cn/
FAQ
What is CVE-2025-57577?
CVE-2025-57577 is a vulnerability with a CVSS score of 8.0 (HIGH). An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt us...
How severe is CVE-2025-57577?
CVE-2025-57577 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-57577?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.