CVEs we hold for H3c
Records whose assigning authority named H3c as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-9393H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflowH3C Magic B0 CVE-2026-8764H3C Magic B3 aspForm UpdateWanParams buffer overflowH3C Magic B3 CVE-2026-6581H3C Magic B1 aspForm SetMobileAPInfoById buffer overflowH3C Magic B1 CVE-2026-6563H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflowH3C Magic B1 CVE-2026-6560H3C Magic B0 aspForm Edit_BasicSSID buffer overflowH3C Magic B0 CVE-2026-3943H3C ACG1000-AK230 aaa_portal_auth_local_submit command injectionH3C ACG1000-AK230 CVE-2026-3701H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflowH3C Magic B1 CVE-2026-18900H3C NX15 Backend RPC esps file.exec os command injectionH3C NX15 CVE-2026-18814H3C NX15 esps reload.reload_config command injectionH3C NX15 CVE-2026-15907H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injectionH3C SecPath F1000-C8300 CVE-2026-15479H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recoveryH3C NX15 CVE-2026-10259H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflowH3C Magic B0 CVE-2025-8907H3C M2 NAS Webserver Configuration unnecessary privilegesH3C M2 NAS CVE-2025-6091H3C GR-3000AX aspForm UpdateIpv6Params buffer overflowH3C GR-3000AX CVE-2025-6090H3C GR-5400AX aspForm UpdateIpv6params buffer overflowH3C GR-5400AX CVE-2025-5162H3C SecCenter SMP-E1114P02 importFile unrestricted uploadH3C SecCenter SMP-E1114P02 CVE-2025-5161H3C SecCenter SMP-E1114P02 download operationDailyOut path traversalH3C SecCenter SMP-E1114P02 CVE-2025-5160H3C SecCenter SMP-E1114P02 download path traversalH3C SecCenter SMP-E1114P02 CVE-2025-5159H3C SecCenter SMP-E1114P02 download path traversalH3C SecCenter SMP-E1114P02 CVE-2025-5158H3C SecCenter SMP-E1114P02 downloadSoftware path traversalH3C SecCenter SMP-E1114P02 CVE-2025-5157H3C SecCenter SMP-E1114P02 fileContent path traversalH3C SecCenter SMP-E1114P02 CVE-2025-5156H3C GR-5400AX aspForm EditWlanMacList buffer overflowH3C GR-5400AX CVE-2025-4998H3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of serviceH3C Magic R200G CVE-2025-4997H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of serviceH3C R2+ProG CVE-2025-4446H3C GR-5400AX aspForm Edit_List_SSID buffer overflowH3C GR-5400AX CVE-2025-4440H3C GR-1800AX aspForm EnableIpv6 buffer overflowH3C GR-1800AX CVE-2025-3854H3C GR-3000AX HTTP POST Request aspForm Edit_List_SSID buffer overflowH3C GR-3000AX CVE-2025-3546H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injectionH3C Magic BE18000 CVE-2025-3545H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injectionH3C Magic BE18000 CVE-2025-3544H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injectionH3C Magic BE18000 CVE-2025-3543H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command…H3C Magic R3010 CVE-2025-3542H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injectionH3C Magic R3010 CVE-2025-3541H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command…H3C Magic R3010 CVE-2025-3540H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command…H3C Magic R3010 CVE-2025-3539H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injectionH3C Magic BE18000 CVE-2025-2732H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injectionH3C Magic BE18000 CVE-2025-2731H3C Magic BE18000 HTTP POST Request getDualbandSync command injectionH3C Magic BE18000 CVE-2025-2730H3C Magic BE18000 HTTP POST Request getssidname command injectionH3C Magic BE18000 CVE-2025-2729H3C Magic BE18000 HTTP POST Request networkSetup command injectionH3C Magic BE18000 CVE-2025-2728H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injectionH3C Magic NX400 CVE-2025-2727H3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injectionH3C Magic NX30 Pro CVE-2025-2726H3C Magic BE18000 HTTP POST Request esps command injectionH3C Magic BE18000 CVE-2025-2725H3C Magic BE18000 HTTP POST Request auth command injectionH3C Magic BE18000 CVE-2025-14196H3C Magic B1 aspForm sub_44de0 buffer overflowH3C Magic B1 CVE-2025-14015H3C Magic B0 aspForm EditWlanMacList buffer overflowH3C Magic B0 CVE-2025-10942H3C Magic B3 aspForm EditMacList buffer overflowH3C Magic B3 CVE-2024-13980H3C Intelligent Management Center (iMC) /byod/index.xhtml RCEH3C Group Intelligent Management Center (iMC) CVE-2023-5142H3C ER6300G2 Config File userLogin.asp path traversalH3C ER6300G2 55 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.