CVE-2025-44653: h3c GR2200 Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected.

Affected products

• h3c GR2200 Firmware: version minigr1a0v100r016 only

Published 2025-07-21. Last modified 2026-07-05.