CVE-2024-32238

The H3C ER8300G2-X router discloses its management password through the login interface itself, so an unauthenticated visitor to the login page can retrieve the very credential the page is supposed to protect. That collapses the entire authentication scheme: there's no cracking or guessing, the secret is handed out on request, and with it comes full administrative control of the router.

This is as blunt as network-device bugs get, and blunt is what gets scanned. A router whose admin password can be read remotely is an immediate, reliable takeover, and edge routers are exactly what opportunistic actors enumerate for persistence and traffic control. The only thing standing between an attacker and the device is whether they can reach the login interface in the first place.

Everything therefore rides on exposure. We inventory these H3C units and verify their management interfaces are not answering from the internet or any untrusted segment, because for this flaw network reachability is the whole fight. Where one is exposed, we treat the admin password as already compromised and rotate credentials only after the device is off the public side — since the disclosure defeats any password we set while it remains reachable.