Priority HIGH 82
An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00571 · Published 2026-01-06 · No fix listed CWE-276
Priority HIGH 82
H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11609 · Published 2024-11-20 · No fix listed CWE-94
Priority HIGH 82
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00559 · Published 2024-08-16 · No fix listed CWE-259
Priority HIGH 82
H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00559 · Published 2024-08-16 · No fix listed CWE-798
Priority HIGH 82
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00928 · Published 2023-05-08 · No fix listed CWE-787
Priority HIGH 82
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00928 · Published 2023-05-08 · No fix listed CWE-787
Priority HIGH 82
An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00787 · Published 2023-02-22 · No fix listed CWE-287
Priority HIGH 81
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00588 · Published 2026-10-02 · No fix listed CWE-434
Priority HIGH 76
A vulnerability was determined in H3C Magic NX15 NX15V100R017.
CVSS 4.0CRITICAL 9.4· Network · Low privileges · No interaction · EPSS 0.00546 · Published 2026-10-19 · No fix listed CWE-74
Priority HIGH 76
A vulnerability was found in H3C Magic NX15 100R017.
CVSS 4.0CRITICAL 9.4· Network · Low privileges · No interaction · EPSS 0.02034 · Published 2026-10-19 · No fix listed CWE-77
Priority HIGH 75
A vulnerability, which was classified as critical, has been found in H3C R160 V1004004.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00982 · Published 2023-05-12 · No fix listed CWE-121
Priority HIGH 75
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01214 · Published 2022-08-25 · No fix listed CWE-787
Priority HIGH 75
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01214 · Published 2022-08-25 · No fix listed CWE-787
Priority HIGH 75
H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.10805 · Published 2022-08-25 · No fix listed CWE-78
Priority HIGH 75
H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.10805 · Published 2022-08-25 · No fix listed CWE-78
Priority HIGH 73
A security vulnerability has been detected in H3C Magic B0 up to 100R002.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00484 · Published 2026-06-01 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in H3C Magic B0 up to 100R002.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2026-05-24 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was detected in H3C Magic B1 up to 100R004.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2026-04-19 · No fix listed CWE-119
Priority HIGH 73
A vulnerability has been found in H3C Magic B1 up to 100R004.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00481 · Published 2026-04-19 · No fix listed CWE-119
Priority HIGH 73
A security vulnerability has been detected in H3C Magic B0 up to 100R002.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00481 · Published 2026-04-19 · No fix listed CWE-119
Priority HIGH 73
A security vulnerability has been detected in H3C Magic B1 up to 100R004.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00781 · Published 2026-03-08 · No fix listed CWE-119
Priority HIGH 73
A weakness has been identified in H3C Magic B1 up to 100R004.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00574 · Published 2025-12-07 · No fix listed CWE-119
Priority HIGH 73
A weakness has been identified in H3C Magic B0 up to 100R002.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00877 · Published 2025-12-04 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was identified in H3C Magic B3 up to 100R002.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00841 · Published 2025-09-25 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00934 · Published 2025-05-25 · No fix listed CWE-119
Load more
THREATIST.IORead the docs