Skip to content
OpenAdvisories

Product · H3C

Magic BE18000

10 known vulnerabilities.

Magic BE18000 at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202540
Mar 202560
Feb 202500
Jan 202500
Dec 202400

Most common weaknesses

All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 8.0
    CVE-2025-3546

    H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection

    A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizar…

    H3C Magic NX15 Magic NX400 Magic NX30 Pro
  • High 8.0
    CVE-2025-3545

    H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection

    A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/setLanguage of the…

    H3C Magic NX15 Magic NX30 Pro Magic NX400
  • High 8.0
    CVE-2025-3544

    H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection

    A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getCapabilityWeb of …

    H3C Magic NX15 Magic NX400 Magic NX30 Pro
  • High 8.0
    CVE-2025-3539

    H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection

    A vulnerability classified as critical has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getBasicInfo of the compon…

    H3C Magic NX15 Magic NX400 Magic NX30 Pro
  • High 8.0
    CVE-2025-2732

    H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection

    A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/wizard/getWifiNeighbour of the compone…

    H3C Magic NX15 Magic NX30 Pro Magic NX400
  • High 8.0
    CVE-2025-2731

    H3C Magic BE18000 HTTP POST Request getDualbandSync command injection

    A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/wizard/getDualbandSync of the…

    H3C Magic NX15 Magic NX400 Magic NX30 Pro
  • High 8.0
    CVE-2025-2730

    H3C Magic BE18000 HTTP POST Request getssidname command injection

    A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is an unknown function of the file /api/wizard/getssidname of the component HTTP POST Request …

    H3C Magic NX15 Magic NX400 Magic NX30 Pro
  • High 8.0
    CVE-2025-2729

    H3C Magic BE18000 HTTP POST Request networkSetup command injection

    A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects some unknown processing of the file /api/wizard/networkSetup of the component HTTP POST Reque…

    H3C Magic NX15 Magic NX30 Pro Magic NX400
  • High 8.0
    CVE-2025-2726

    H3C Magic BE18000 HTTP POST Request esps command injection

    A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this issue is some unknown functionality of the file /api/esps of the component HTTP PO…

    H3C Magic NX15 Magic NX30 Pro Magic NX400
  • High 8.0
    CVE-2025-2725

    H3C Magic BE18000 HTTP POST Request auth command injection

    A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this vulnerability is an unknown functionality of the file /api/login/auth of the component HTTP POST Re…

    H3C Magic NX15 Magic NX30 Pro Magic NX400