CVE-2022-50800: Hangzhou h3c Technologies h3c SSL VPN

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.

Affected products

• Hangzhou h3c Technologies h3c SSL VPN: version 1.1 only

Published 2025-12-30. Last modified 2026-06-17.