Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Magic NX15 — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in Magic NX15, with AI-generated Chinese analysis, references, and POCs.

Vendor: H3C

CVE IDTitleCVSSSeverityPaused
CVE-2025-3546 H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection CWE-77 8.0 High2025-04-14
CVE-2025-3545 H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection CWE-77 8.0 High2025-04-14
CVE-2025-3544 H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection CWE-77 8.0 High2025-04-14
CVE-2025-3543 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection CWE-77 8.0 High2025-04-14
CVE-2025-3542 H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection CWE-77 8.0 High2025-04-13
CVE-2025-3541 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection CWE-77 8.0 High2025-04-13
CVE-2025-3540 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection CWE-77 8.0 High2025-04-13
CVE-2025-3539 H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection CWE-77 8.0 High2025-04-13
CVE-2025-2732 H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection CWE-77 8.0 High2025-03-25
CVE-2025-2731 H3C Magic BE18000 HTTP POST Request getDualbandSync command injection CWE-77 8.0 High2025-03-25
CVE-2025-2730 H3C Magic BE18000 HTTP POST Request getssidname command injection CWE-77 8.0 High2025-03-25
CVE-2025-2729 H3C Magic BE18000 HTTP POST Request networkSetup command injection CWE-77 8.0 High2025-03-25
CVE-2025-2726 H3C Magic BE18000 HTTP POST Request esps command injection CWE-77 8.0 High2025-03-25
CVE-2025-2725 H3C Magic BE18000 HTTP POST Request auth command injection CWE-77 8.0 High2025-03-25

All 14 known CVE vulnerabilities affecting Magic NX15 with full Chinese analysis, references, and POCs where available.