CVE-2025-3546

🗓️ 14 Apr 2025 01:31:07Reported by VulDBType

Critical command injection vulnerability affects H3C Magic devices; upgrade recommended.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-3546	13 Apr 202512:35	–	circl
CNNVD	H3C多款产品注入漏洞	14 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-3546 H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection	14 Apr 202501:31	–	cvelist
EUVD	EUVD-2025-10858	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3546	14 Apr 202502:15	–	nvd
Positive Technologies	PT-2025-16187	13 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-3546	16 Apr 202501:33	–	redhatcve
Vulnrichment	CVE-2025-3546 H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection	14 Apr 202501:31	–	vulnrichment

NVD

Node

h3c magic_nx15_firmwareRange≤100r014

AND

h3c magic_nx15Match-

Node

h3c magic_nx30_pro_firmwareRange≤100r014

AND

h3c magic_nx30_proMatch-

Node

h3c magic_nx400_firmwareRange≤100r014

AND

h3c magic_nx400Match-

Node

h3c magic_r3010_firmwareRange≤100r014

AND

h3c magic_r3010Match-

Node

h3c magic_be18000_firmwareRange≤100r014

AND

h3c magic_be18000Match-

[
  {
    "vendor": "H3C",
    "product": "Magic NX15",
    "versions": [
      {
        "version": "V100R014",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "H3C",
    "product": "Magic NX30 Pro",
    "versions": [
      {
        "version": "V100R014",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "H3C",
    "product": "Magic NX400",
    "versions": [
      {
        "version": "V100R014",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "H3C",
    "product": "Magic R3010",
    "versions": [
      {
        "version": "V100R014",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "H3C",
    "product": "Magic BE18000",
    "versions": [
      {
        "version": "V100R014",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
h3c	www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/
gist	www.gist.github.com/isstabber/154661f329e4ae6bfe15dcdc0b932ff3
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
zhiliao	www.zhiliao.h3c.com/theme/details/229784
vuldb	www.vuldb.com/

13 Feb 2026 21:47Current

8.2High risk

Vulners AI Score8.2

CVSS 27.7

CVSS 3.18

CVSS 48.6

CVSS 38

EPSS0.00488

SSVC