Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Magic NX15 — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in Magic NX15, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the Magic NX15 network appliance, specifically categorized under the vendor Magic and tagged with relevant vulnerability classifications. The collection encompasses a comprehensive range of reported issues including buffer overflows, privilege escalation flaws, and remote code execution risks identified in the device firmware and embedded operating systems from its initial market release through the most recent public disclosures. Visitors can utilize this resource to track the historical progression of vendor security advisories, analyze the prevalence and impact of specific weakness classes within this hardware lineage, or review the complete vulnerability timeline for the Magic NX15 to assess long-term security posture. The data presented here serves as a centralized reference for security professionals, system administrators, and researchers requiring accurate historical context on the product's exposure to cyber threats without relying on fragmented sources or outdated reports. All entries are derived from verified public disclosures and official vendor communications to ensure the integrity of the aggregated information. This compilation aims to facilitate informed decision-making regarding patch management, risk assessment, and defensive strategy formulation for environments deploying this specific networking equipment. Users are encouraged to cross-reference findings with their own internal audit results to maintain robust security controls.

Vendor: H3C

CVE ID Title CVSS Severity Published
CVE-2026-112373 H3C Magic NX15 usrlist sub_416874 stack-based overflow CWE-121 6.5 Medium 2026-10-19
CVE-2026-112372 H3C Magic NX15 upload importprofile path traversal CWE-22 6.6 Medium 2026-10-19
CVE-2026-112371 H3C Magic NX15 RPC esps write code injection CWE-94 9.9 Critical 2026-10-19
CVE-2026-112370 H3C Magic NX15 usrlist sub_416874 os command injection CWE-78 9.9 Critical 2026-10-19
CVE-2025-3546 H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection CWE-77 8.0 High 2025-04-14
CVE-2025-3545 H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection CWE-77 8.0 High 2025-04-14
CVE-2025-3544 H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection CWE-77 8.0 High 2025-04-14
CVE-2025-3543 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection CWE-77 8.0 High 2025-04-14
CVE-2025-3542 H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection CWE-77 8.0 High 2025-04-13
CVE-2025-3541 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection CWE-77 8.0 High 2025-04-13
CVE-2025-3540 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection CWE-77 8.0 High 2025-04-13
CVE-2025-3539 H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection CWE-77 8.0 High 2025-04-13
CVE-2025-2732 H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection CWE-77 8.0 High 2025-03-25
CVE-2025-2731 H3C Magic BE18000 HTTP POST Request getDualbandSync command injection CWE-77 8.0 High 2025-03-25
CVE-2025-2730 H3C Magic BE18000 HTTP POST Request getssidname command injection CWE-77 8.0 High 2025-03-25
CVE-2025-2729 H3C Magic BE18000 HTTP POST Request networkSetup command injection CWE-77 8.0 High 2025-03-25
CVE-2025-2726 H3C Magic BE18000 HTTP POST Request esps command injection CWE-77 8.0 High 2025-03-25
CVE-2025-2725 H3C Magic BE18000 HTTP POST Request auth command injection CWE-77 8.0 High 2025-03-25

All 18 known CVE vulnerabilities affecting Magic NX15 with full Chinese analysis, references, and POCs where available.