H3c vulnerabilities
60 CVEs and advisories name H3c as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-5162H3C SecCenter SMP-E1114P02 importFile unrestricted upload
- CVE-2025-5161H3C SecCenter SMP-E1114P02 download operationDailyOut path traversal
- CVE-2025-5160H3C SecCenter SMP-E1114P02 download path traversal
- CVE-2025-5159H3C SecCenter SMP-E1114P02 download path traversal
- CVE-2025-5158H3C SecCenter SMP-E1114P02 downloadSoftware path traversal
- CVE-2025-5157H3C SecCenter SMP-E1114P02 fileContent path traversal
- CVE-2025-5156H3C GR-5400AX aspForm EditWlanMacList buffer overflow
- CVE-2025-4998H3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of service
- CVE-2025-4997H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of service
- CVE-2025-4446H3C GR-5400AX aspForm Edit_List_SSID buffer overflow
- CVE-2025-4440H3C GR-1800AX aspForm EnableIpv6 buffer overflow
- CVE-2025-3854H3C GR-3000AX HTTP POST Request aspForm Edit_List_SSID buffer overflow
- CVE-2025-3546H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection
- CVE-2025-3545H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection
- CVE-2025-3544H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection
- CVE-2025-3543H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection
- CVE-2025-3542H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection
- CVE-2025-3541H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection
- CVE-2025-3540H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection
- CVE-2025-3539H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection
- CVE-2025-2732H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection
- CVE-2025-2731H3C Magic BE18000 HTTP POST Request getDualbandSync command injection
- CVE-2025-2730H3C Magic BE18000 HTTP POST Request getssidname command injection
- CVE-2025-2729H3C Magic BE18000 HTTP POST Request networkSetup command injection
- CVE-2025-2728H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection
- CVE-2025-2727H3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injection
- CVE-2025-2726H3C Magic BE18000 HTTP POST Request esps command injection
- CVE-2025-2725H3C Magic BE18000 HTTP POST Request auth command injection
- CVE-2023-5142H3C ER6300G2 Config File userLogin.asp path traversal
- CVE-2023-2676H3C R160 aspForm stack-based overflow