Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-29296

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

H3C magic be18000是中国H3C公司的一款WiFi7双万兆口无线路由器。 H3C magic be18000 V200R007版本、H3C NX400 V100R015版本、H3C Magic NX30 Pro V100R0011版本、H3C Magic R3010 V100R009版本、H3C Magic NX15 V100R017版本、H3C Magic R1510 V100R016版本和H3C NE36 Pro V100R002版本存在安全漏洞，该漏洞源于/api/esps请求处理器存

AI Predicted 9.8 Difficulty: Easy EPSS 2.25% · P82

Affected Version Matrix 1

VendorProduct Version RangeStatus
n/a n/a n/a affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-29296

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 contain multiple command injection vulnerabilities in the /api/esps request handler. The affected object interfaces and methods are esps.dhcpd.vlan (getlist, delete), esps.filter.url (add, modify), esps.apcm.version (delete, H3C Magic NX15 only), esps.swcm.version (delete, upgrade, all affected models except H3C Magic NX15), and esps.system.ntp (set, all affected models except H3C Magic NX15). Attacker-controlled request parameters are incorporated into shell expressions executed by eval without adequate validation, allowing a remote attacker to execute arbitrary commands as root and gain complete control of the affected device.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
H3C magic be18000 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
H3C magic be18000是中国H3C公司的一款WiFi7双万兆口无线路由器。 H3C magic be18000 V200R007版本、H3C NX400 V100R015版本、H3C Magic NX30 Pro V100R0011版本、H3C Magic R3010 V100R009版本、H3C Magic NX15 V100R017版本、H3C Magic R1510 V100R016版本和H3C NE36 Pro V100R002版本存在安全漏洞，该漏洞源于/api/esps请求处理器存
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2025-29296

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-29296

请登录查看更多情报信息。

Other References for CVE-2025-29296 (1)

Same Patch Batch · n/a · 2026-08-04 · 17 CVEs total

CVE-2026-67857 7.5 HIGH Open62541 安全漏洞
CVE-2026-67861 7.5 HIGH Open62541 安全漏洞
CVE-2026-67858 7.5 HIGH Open62541 安全漏洞
CVE-2026-67859 7.5 HIGH Open62541 安全漏洞
CVE-2026-18816 5.0 MEDIUM Baserow 2FA Verify Endpoint views.py verify improper authentication
CVE-2026-18819 4.3 MEDIUM RackTables cross-site request forgery
CVE-2026-18817 2.2 LOW Baserow Inactive Non-Staff User serializers.py BaserowImpersonateAuthTokenSerializer impro
CVE-2026-67979 NASA cFS 安全漏洞
CVE-2026-51400 Vim Project Vim 安全漏洞
CVE-2026-51401 Vim Project Vim 安全漏洞
CVE-2026-52370 O2OA 安全漏洞
CVE-2026-67856 Open62541 安全漏洞
CVE-2026-67855 Open62541 安全漏洞
CVE-2026-51144 Soliton Systems MailZen Management Protal 安全漏洞
CVE-2026-67862 Open62541 安全漏洞
CVE-2026-67860 Open62541 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-29296

No comments yet

Leave a comment