Skip to content
OpenAdvisories

Vendor

H3C

62 known vulnerabilities.

Products

Magic NX15 18 Magic NX30 Pro 15 Magic NX400 15 Magic R3010 14 Magic BE18000 10 NX15 9 SecCenter SMP-E1114P02 6 Magic B1 4 Magic B0 4 GR-5400AX 3 GR-3000AX 2 GR-1800AX 2 Magic B3 2 SecPath F1000-C8300 1 ACG1000-AK230 1 Intelligent Management Center (iMC) 1 CVM 1 M2 NAS 1 R2+ProG 1 R160 1 HDM Family-A G5 1 Magic R200G 1 GR-1100-P 1 GR-1108-P 1 GR-1200W 1 GR-2200 1 GR-3200 1 GR-5200 1 GR-8300 1 ER2100n 1 ER2200G2 1 ER3200G2 1 ER3260G2 1 ICG2000 Unified Communication Gateway 1 ER5100G2 1 ER5200G2 1 ER6300G2 1
All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • High 8.0
    CVE-2025-2728

    H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection

    A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vulnerability affects unknown code of the file /api/wizard/getNetworkConf. The manipulation leads to command injection. The attack needs to be…

    H3C Magic NX400 Magic NX30 Pro
  • High 8.0
    CVE-2025-2727

    H3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injection

    A vulnerability, which was classified as critical, was found in H3C Magic NX30 Pro up to V100R007. This affects an unknown part of the file /api/wizard/getNetworkStatus of the component HTTP POST Request Handler. The manipulation leads to command injection. A…

    H3C Magic NX30 Pro
  • High 8.0
    CVE-2025-2726

    H3C Magic BE18000 HTTP POST Request esps command injection

    A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this issue is some unknown functionality of the file /api/esps of the component HTTP PO…

    H3C Magic NX15 Magic NX30 Pro Magic NX400
  • High 8.0
    CVE-2025-2725

    H3C Magic BE18000 HTTP POST Request auth command injection

    A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this vulnerability is an unknown functionality of the file /api/login/auth of the component HTTP POST Re…

    H3C Magic NX15 Magic NX400 Magic NX30 Pro