h3c GR2200 Firmware vulnerabilities

2 CVEs affecting h3c GR2200 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-44653, published 2025-07-21.

More from h3c.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-36510, published 2022-08-25. High severity, CVSS 7.8. EPSS: 11.2% chance of exploitation in the next 30 days. H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
• CVE-2025-44653, published 2025-07-21. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected.