Filtered by vendor H3c
Subscriptions
Filtered by product Magic R100
Subscriptions
Total
20 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-29296 | 1 H3c | 7 Magic Be18000, Magic Ne36 Pro, Magic Nx15 and 4 more | 2026-08-05 | 9.8 Critical |
| H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 contain multiple command injection vulnerabilities in the /api/esps request handler. The affected object interfaces and methods are esps.dhcpd.vlan (getlist, delete), esps.filter.url (add, modify), esps.apcm.version (delete, H3C Magic NX15 only), esps.swcm.version (delete, upgrade, all affected models except H3C Magic NX15), and esps.system.ntp (set, all affected models except H3C Magic NX15). Attacker-controlled request parameters are incorporated into shell expressions executed by eval without adequate validation, allowing a remote attacker to execute arbitrary commands as root and gain complete control of the affected device. | ||||
| CVE-2022-34598 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands. | ||||
| CVE-2022-30926 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm. | ||||
| CVE-2022-30925 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm. | ||||
| CVE-2022-30924 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/aspForm. | ||||
| CVE-2022-30923 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goform/aspForm. | ||||
| CVE-2022-30922 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm. | ||||
| CVE-2022-30921 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm. | ||||
| CVE-2022-30920 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm. | ||||
| CVE-2022-30919 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm. | ||||
| CVE-2022-30918 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm. | ||||
| CVE-2022-30917 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm. | ||||
| CVE-2022-30916 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm. | ||||
| CVE-2022-30915 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm. | ||||
| CVE-2022-30914 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm. | ||||
| CVE-2022-30913 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm. | ||||
| CVE-2022-30912 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm. | ||||
| CVE-2022-30910 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm. | ||||
| CVE-2022-30909 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 9.8 Critical |
| H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm. | ||||
| CVE-2022-28940 | 1 H3c | 2 Magic R100, Magic R100 Firmware | 2024-11-21 | 7.5 High |
| In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack. | ||||
Page 1 of 1.