Description
A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| H3C | ICG2000 Unified Communication Gateway | 2023 | — |
References
- VDB-435869 | H3C ICG2000 Unified Communication Gateway Web Management check.j missing authentication vdb-entry
- VDB-435869 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-126759 | CVE Analysis and Report third-party-advisory
- Submit #1035822 | H3C (New H3C Technologies Co., Ltd.) `ICG2000 Unified Communication Gateway (ICG 2000 Information Communication Gateway), web management module ICG2000, firmware generation 2023 (device self-reports cyear=2023; exact Comware release third-party-advisory