Browse CVEs

HIGH 8.8 CVE-2026-3701 A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the fil… Magic B1 Firmware after 100r004 Fix from $1,9502026-03-08 CRITICAL 9.8 CVE-2025-60262 An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability … Mc102 G Firmware Mitigation only Fix from $2,3002026-01-06 CRITICAL 9.8 CVE-2025-14015 A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulatio… Magic B0 Firmware after 100R002 Fix from $2,3002025-12-04 HIGH 8.0 CVE-2025-57295 H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account ha… Magic Nx15 Firmware No fix yet Fix from $1,9502025-09-18 HIGH 7.5 CVE-2025-44653 In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are … Gr2200 Firmware Mitigation only Fix from $1,9502025-07-21 CRITICAL 9.8 CVE-2025-5162 A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this issue is some unknow… Seccenter Smp 1114p02 after 20250513 Fix from $2,3002025-05-26 HIGH 7.5 CVE-2025-5161 A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulnerability is the function oper… Seccenter Smp 1114p02 after 20250513 Fix from $1,9502025-05-26 HIGH 7.5 CVE-2025-5159 A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue affects the function Download of… Seccenter Smp 1114p02 after 20250513 Fix from $1,9502025-05-26 HIGH 7.5 CVE-2025-5160 A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected is the function Download of the file … Seccenter Smp 1114p02 after 20250513 Fix from $1,9502025-05-26 HIGH 7.5 CVE-2025-5158 A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as problematic. This vulnerability affects the function … Seccenter Smp 1114p02 after 20250513 Fix from $1,9502025-05-25 HIGH 7.5 CVE-2025-5157 A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been classified as critical. This affects the function fileContent of … Seccenter Smp 1114p02 after 20250513 Fix from $1,9502025-05-25 CRITICAL 9.8 CVE-2025-5156 A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical. Affected by this issue is the function EditWlanMacList of the fi… Gr 5400ax Firmware after 100R008 Fix from $2,3002025-05-25 HIGH 8.0 CVE-2025-3546 A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as criti… Magic Nx15 Firmware after 100r014 Fix from $1,9502025-04-14 CRITICAL 9.8 CVE-2024-57473 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who s… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-57471 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. At… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-57479 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who su… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-57480 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who succ… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-57482 H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Atta… N12 Firmware Mitigation only Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-52765EPSS 11% H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter. Gr 1800ax Firmware No fix yet Fix from $2,3002024-11-20 CRITICAL 9.8 CVE-2024-42639 H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root. Gr1100 P Firmware No fix yet Fix from $2,3002024-08-16 CRITICAL 9.8 CVE-2024-42637 H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. R3010 Firmware No fix yet Fix from $2,3002024-08-16 CRITICAL 9.8 CVE-2024-42638 H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. Magic B1st Firmware No fix yet Fix from $2,3002024-08-16 CRITICAL 9.8 CVE-2024-38902 H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. Magic R230 Firmware No fix yet Fix from $2,3002024-06-24 MEDIUM 5.3 CVE-2023-5142 A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER… Gr 1100 P Firmware after 20230908 Fix from $1,6002023-09-24 HIGH 7.5 CVE-2023-34933 A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST req… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34934 A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST r… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34935 A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST requ… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34936 A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST requ… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34937 A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34928 A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST requ… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28