Browse CVEs

CRITICAL 9.8 CVE-2025-60262 An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability … Mc102 G Firmware Mitigation only Fix from $2,3002026-01-06 HIGH 8.0 CVE-2025-57295 H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account ha… Magic Nx15 Firmware No fix yet Fix from $1,9502025-09-18 HIGH 7.5 CVE-2025-44653 In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are … Gr2200 Firmware Mitigation only Fix from $1,9502025-07-21 CRITICAL 9.8 CVE-2024-57473 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who s… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-57471 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. At… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-57479 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who su… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-57480 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who succ… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-57482 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Atta… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-52765EPSS 11% H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter. Gr 1800ax Firmware No fix yet Fix from $2,3002024-11-20 CRITICAL 9.8 CVE-2024-42639 H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root. Gr1100 P Firmware No fix yet Fix from $2,3002024-08-16 CRITICAL 9.8 CVE-2024-42637 H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. R3010 Firmware No fix yet Fix from $2,3002024-08-16 CRITICAL 9.8 CVE-2024-42638 H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. Magic B1st Firmware No fix yet Fix from $2,3002024-08-16 CRITICAL 9.8 CVE-2024-38902 H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. Magic R230 Firmware No fix yet Fix from $2,3002024-06-24 HIGH 7.5 CVE-2023-34933 A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST req… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34934 A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST r… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34935 A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST requ… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34936 A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST requ… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34937 A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34928 A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST requ… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34929 A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34930 A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34931 A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST req… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34932 A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST reque… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34924 H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the function SetAPInfoById. This vulnerability allows attackers to cause … Magic B1stw Firmware Mitigation only Fix from $1,9502023-06-26 HIGH 7.2 CVE-2023-33640 H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm. Magic R300 2100m Firmware Mitigation only Fix from $1,9502023-05-31 HIGH 7.2 CVE-2023-33641 H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm. Magic R300 2100m Firmware Mitigation only Fix from $1,9502023-05-31 HIGH 7.2 CVE-2023-33642 H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm. Magic R300 2100m Firmware Mitigation only Fix from $1,9502023-05-31 HIGH 7.2 CVE-2023-33643 H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm. Magic R300 2100m Firmware Mitigation only Fix from $1,9502023-05-31 HIGH 7.2 CVE-2023-33627 H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm. Magic R300 2100m Firmware Mitigation only Fix from $1,9502023-05-31 HIGH 7.2 CVE-2023-33628 H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. Magic R300 2100m Firmware Mitigation only Fix from $1,9502023-05-31