Skip to contentH3c Nx15 vulnerabilities
- h3c magic nx15H3C Magic NX15 usrlist sub_416874 stack-based overflowCVE-2026-1123737.1 High
- h3c magic nx15H3C Magic NX15 upload importprofile path traversalCVE-2026-1123725.1 Medium
- h3c magic nx15H3C Magic NX15 RPC esps write code injectionCVE-2026-1123719.4 Critical
- h3c magic nx15H3C Magic NX15 usrlist sub_416874 os command injectionCVE-2026-1123709.4 Critical
- h3c nx15H3C NX15 esps repeaterproc command injectionCVE-2026-189028.6 High
- h3c nx15H3C NX15 Web API esps service.add routineCVE-2026-189018.6 High
- h3c nx15H3C NX15 Backend RPC esps file.exec os command injectionCVE-2026-189008.6 High
- h3c nx15H3C NX15 esps reload.reload_config command injectionCVE-2026-188148.6 High
- h3c nx15H3C NX15 esps delete command injectionCVE-2026-188138.6 High
- h3c nx15H3C NX15 esps esps.ipv6.wan command injectionCVE-2026-188128.6 High
- h3c nx15H3C NX15 esps add command injectionCVE-2026-188118.6 High
- h3c nx15H3C NX15 networkSetup missing authenticationCVE-2026-188106.9 Medium
- h3c nx15H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recoveryCVE-2026-154796.9 Medium
- h3c magic nx15 firmwareH3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to...CVE-2025-572958.0 High
- h3c magic be18000, magic nx15, magic nx30 pro +7 more +9 moreH3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injectionCVE-2025-35468.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injectionCVE-2025-35458.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injectionCVE-2025-35448.6 High
- h3c magic nx15, magic nx30 pro, magic nx400 +1 more +3 moreH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injectionCVE-2025-35438.6 High
- h3c magic nx15, magic nx400, magic r3010 +2 moreH3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injectionCVE-2025-35428.6 High
- h3c magic nx15, magic nx30 pro, magic nx400 +1 more +3 moreH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injectionCVE-2025-35418.6 High
- h3c magic nx15, magic nx30 pro, magic nx400 +1 more +3 moreH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injectionCVE-2025-35408.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injectionCVE-2025-35398.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getWifiNeighbour command injectionCVE-2025-27328.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getDualbandSync command injectionCVE-2025-27318.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getssidname command injectionCVE-2025-27308.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request networkSetup command injectionCVE-2025-27298.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request esps command injectionCVE-2025-27268.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request auth command injectionCVE-2025-27258.6 High