H3c vulnerabilities

Products

• Magic R100 Firmware 28
• Magic R200 Firmware 25
• Gr-1200w Firmware 21
• Magic Nx18 Plus Firmware 20
• Magic Nx15 18
• Magic R300-2100m Firmware 17
• H200 Firmware 16
• Magic Nx30 Pro 15
• Magic Nx400 15
• Magic R3010 14
• B5 Mini Firmware 11
• Magic 11
• Magic B1st Firmware 11
• Magic Be18000 10
• Nx15 9
• Seccenter Smp-1114p02 6
• Seccenter Smp-e1114p02 6
• N12 Firmware 5
• Magic B0 4
• Magic B1 4
• Gr-1800ax 3
• Gr-5400ax 3
• Gr-1100-p 2
• Gr-1800ax Firmware 2
• Gr2200 Firmware 2
• Gr-3000ax 2
• Magic B3 2
• Magic Nx15 Firmware 2
• Magic R230 2
• Magic R230 Firmware 2

Newest

• h3c magic nx15 H3C Magic NX15 usrlist sub_416874 stack-based overflow CVE-2026-112373 7.1 HighOctober 19, 2026
• h3c magic nx15 H3C Magic NX15 upload importprofile path traversal CVE-2026-112372 5.1 MediumOctober 19, 2026
• h3c magic nx15 H3C Magic NX15 RPC esps write code injection CVE-2026-112371 9.4 CriticalOctober 19, 2026
• h3c magic nx15 H3C Magic NX15 usrlist sub_416874 os command injection CVE-2026-112370 9.4 CriticalOctober 19, 2026
• h3c hdm family-a g5 H3C G3/G5 HDM Firmware Verification Key Replacement CVE-2026-65197 3.1 LowOctober 13, 2026
• h3c cvm H3C CVM Unauthenticated File Upload via fileUpload/upload Token CVE-2023-54405 9.3 CriticalOctober 2, 2026
• h3c nx15 H3C NX15 esps repeaterproc command injection CVE-2026-18902 8.6 HighAugust 5, 2026
• h3c nx15 H3C NX15 Web API esps service.add routine CVE-2026-18901 8.6 HighAugust 5, 2026
• h3c nx15 H3C NX15 Backend RPC esps file.exec os command injection CVE-2026-18900 8.6 HighAugust 5, 2026
• h3c nx15 H3C NX15 esps reload.reload_config command injection CVE-2026-18814 8.6 HighAugust 4, 2026
• h3c nx15 H3C NX15 esps delete command injection CVE-2026-18813 8.6 HighAugust 4, 2026
• h3c nx15 H3C NX15 esps esps.ipv6.wan command injection CVE-2026-18812 8.6 HighAugust 4, 2026
• h3c nx15 H3C NX15 esps add command injection CVE-2026-18811 8.6 HighAugust 4, 2026
• h3c nx15 H3C NX15 networkSetup missing authentication CVE-2026-18810 6.9 MediumAugust 4, 2026
• h3c secpath f1000-c8300 H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injection CVE-2026-15907 6.9 MediumJuly 15, 2026
• h3c nx15 H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery CVE-2026-15479 6.9 MediumJuly 12, 2026
• h3c magic b0 H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow CVE-2026-10259 8.7 HighJune 1, 2026
• h3c magic b0 H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow CVE-2026-9393 8.7 HighMay 24, 2026
• h3c magic b3 H3C Magic B3 aspForm UpdateWanParams buffer overflow CVE-2026-8764 8.6 HighMay 17, 2026
• h3c magic b1 H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow CVE-2026-6581 8.7 HighApril 19, 2026
• h3c magic b1 H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow CVE-2026-6563 8.7 HighApril 19, 2026
• h3c magic b0 H3C Magic B0 aspForm Edit_BasicSSID buffer overflow CVE-2026-6560 8.7 HighApril 19, 2026
• h3c acg1000-ak230 H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection CVE-2026-3943 EPSS 42.6% 6.9 MediumMarch 11, 2026
• h3c magic b1, magic b1 firmware +1 more H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflow CVE-2026-3701 8.7 HighMarch 8, 2026
• h3c magic ba1500l firmware, mc102-g firmware +1 more An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless... CVE-2025-60262 9.8 CriticalJanuary 6, 2026
• h3c magic b1 H3C Magic B1 aspForm sub_44de0 buffer overflow CVE-2025-14196 8.7 HighDecember 7, 2025
• h3c magic b0, magic b0 firmware +1 more H3C Magic B0 aspForm EditWlanMacList buffer overflow CVE-2025-14015 8.7 HighDecember 4, 2025
• h3c magic b3 H3C Magic B3 aspForm EditMacList buffer overflow CVE-2025-10942 8.7 HighSeptember 25, 2025
• h3c magic nx15 firmware H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to... CVE-2025-57295 8.0 HighSeptember 18, 2025
• h3c m2 nas H3C M2 NAS Webserver Configuration unnecessary privileges CVE-2025-8907 7.3 HighAugust 13, 2025
• h3c gr2200 firmware In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf.... CVE-2025-44653 7.5 HighJuly 21, 2025
• h3c gr-3000ax H3C GR-3000AX aspForm UpdateIpv6Params buffer overflow CVE-2025-6091 8.7 HighJune 15, 2025
• h3c gr-5400ax H3C GR-5400AX aspForm UpdateIpv6params buffer overflow CVE-2025-6090 8.7 HighJune 15, 2025
• h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 more H3C SecCenter SMP-E1114P02 importFile unrestricted upload CVE-2025-5162 5.3 MediumMay 26, 2025
• h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 more H3C SecCenter SMP-E1114P02 download operationDailyOut path traversal CVE-2025-5161 5.3 MediumMay 26, 2025
• h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 more H3C SecCenter SMP-E1114P02 download path traversal CVE-2025-5160 5.3 MediumMay 26, 2025
• h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 more H3C SecCenter SMP-E1114P02 download path traversal CVE-2025-5159 5.3 MediumMay 25, 2025
• h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 more H3C SecCenter SMP-E1114P02 downloadSoftware path traversal CVE-2025-5158 5.3 MediumMay 25, 2025
• h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 more H3C SecCenter SMP-E1114P02 fileContent path traversal CVE-2025-5157 5.3 MediumMay 25, 2025
• h3c gr-5400ax, gr-5400ax firmware +1 more H3C GR-5400AX aspForm EditWlanMacList buffer overflow CVE-2025-5156 8.7 HighMay 25, 2025
• h3c magic r200g H3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of service CVE-2025-4998 7.1 HighMay 20, 2025
• h3c r2+prog H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of service CVE-2025-4997 7.1 HighMay 20, 2025
• h3c gr-5400ax H3C GR-5400AX aspForm Edit_List_SSID buffer overflow CVE-2025-4446 8.6 HighMay 9, 2025
• h3c gr-1800ax H3C GR-1800AX aspForm EnableIpv6 buffer overflow CVE-2025-4440 8.6 HighMay 8, 2025
• h3c gr-3000ax H3C GR-3000AX HTTP POST Request aspForm Edit_List_SSID buffer overflow CVE-2025-3854 8.6 HighApril 22, 2025
• h3c magic be18000, magic nx15, magic nx30 pro +7 more +9 more H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection CVE-2025-3546 8.6 HighApril 14, 2025
• h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 more H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection CVE-2025-3545 8.6 HighApril 14, 2025
• h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 more H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection CVE-2025-3544 8.6 HighApril 14, 2025
• h3c magic nx15, magic nx30 pro, magic nx400 +1 more +3 more H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection CVE-2025-3543 8.6 HighApril 14, 2025
• h3c magic nx15, magic nx400, magic r3010 +2 more H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection CVE-2025-3542 8.6 HighApril 13, 2025
• Show olderLoading…