CVE-2022-50800 H3C SSL VPN n/a Username Enumeration via Login Script Credential Verification
Attackers can enumerate valid usernames via the login script, exposing user account existence information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-50800?
CVE-2022-50800 is a medium-severity vulnerability in Hangzhou H3C Technologies H3C SSL VPN, published on 30 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.
Weakness: CWE-203
Which versions are affected by CVE-2022-50800?
How do I fix CVE-2022-50800?
No fix has been published for CVE-2022-50800 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-50800 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-50800 exists.
Sources
Also known as GHSA-m8f6-rrcx-mrm3.