H3C

Records229All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical83CVSS 9.0–10.0

CVSS high109CVSS 7.0–8.9

Exploited now

H3C records in CISA KEV

No H3C vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Magic R100 Firmware 28 records MEDIUM Magic R200 Firmware 25 records MEDIUM Gr-1200w Firmware 21 records HIGH Magic Nx18 Plus Firmware 20 records HIGH Magic R300-2100m Firmware 17 records HIGH H200 Firmware 16 records MEDIUM B5 Mini Firmware 11 records LOW Magic B1st Firmware 11 records HIGH

Records

28 records in Magic R100 Firmware · all components

TI-2023-12428 CVE-2023-27804 · GHSA-w45c-77r5-cpwj

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the…

MEDIUM 56

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2023-04-07 No fix listed CWE-787

TI-2022-15436 CVE-2022-34598 · GHSA-2875-w7f9-pcqc

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing…

MEDIUM 52

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07194 Published 2022-07-06 No fix listed

TI-2022-12991 CVE-2022-30926 · GHSA-wxq3-hm9c-j6m9

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12990 CVE-2022-30925 · GHSA-pq7h-87gm-9qwq

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12989 CVE-2022-30924 · GHSA-xf2j-g23w-gp93

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12988 CVE-2022-30923 · GHSA-6rg9-2mxg-6j38

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12987 CVE-2022-30922 · GHSA-wqqq-2ccj-j7mq

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12986 CVE-2022-30921 · GHSA-gxwx-wh8p-43wj

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12985 CVE-2022-30920 · GHSA-q39f-3r53-9h2g

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12984 CVE-2022-30919 · GHSA-jfcf-5r9m-7r58

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12983 CVE-2022-30918 · GHSA-gh65-j6h4-fgc5

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12982 CVE-2022-30917 · GHSA-cmwj-97qh-43cp

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12981 CVE-2022-30916 · GHSA-8c8q-m6r8-qvq6

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12980 CVE-2022-30915 · GHSA-8634-539r-8hmx

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12979 CVE-2022-30914 · GHSA-q762-pm7g-hg9r

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12978 CVE-2022-30913 · GHSA-p434-5m3q-g7fw

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12977 CVE-2022-30912 · GHSA-qmvh-vvjq-m4cm

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12976 CVE-2022-30910 · GHSA-q8c5-g3wj-g9pr

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-12975 CVE-2022-30909 · GHSA-jxqc-fm45-cfvv

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via…

MEDIUM 45

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2022-06-08 No fix listed CWE-787

TI-2022-11541 CVE-2022-28940 · GHSA-94f9-9q8r-v9qg

In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without…

LOW 35

In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01183 Published 2022-05-04 No fix listed

TI-2023-12433 CVE-2023-27810 · GHSA-64x6-jjx3-6ggh

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the…

LOW 24

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2023-04-07 No fix listed CWE-787

TI-2023-12432 CVE-2023-27808 · GHSA-47pw-3g2g-9xj2

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the…

LOW 24

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2023-04-07 No fix listed CWE-787

TI-2023-12431 CVE-2023-27807 · GHSA-r3h7-cpq4-j5rr

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the…

LOW 24

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2023-04-07 No fix listed CWE-787

TI-2023-12430 CVE-2023-27806 · GHSA-h7xj-xr99-gpjr

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the…

LOW 24

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2023-04-07 No fix listed CWE-787

TI-2023-12429 CVE-2023-27805 · GHSA-8v94-jg2x-f3vr

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the…

LOW 24

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2023-04-07 No fix listed CWE-787

Open these records in search →