961 matches found
CVE-2025-10942
CVE-2025-10942 affects H3C Magic B3 up to version 100R002. The vulnerability lies in AddMacList/EditMacList in /goform/aspForm, where manipulation of the param argument can cause a buffer overflow and enable remote exploitation. Public PoCs exist. Reports indicate the vendor did not respond to di...
CVE-2025-10942 H3C Magic B3 aspForm EditMacList buffer overflow
A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. T...
CVE-2025-10942 H3C Magic B3 aspForm EditMacList buffer overflow
A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. T...
H3C Magic B3 安全漏洞
H3C Magic B3 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic B3 100R002 and prior versions, which stems from incorrect manipulation of parameter param of function AddMacList in file/goform/aspForm, which could result in a buffer overflow...
PT-2025-39361
Name of the Vulnerable Software and Affected Versions H3C Magic B3 versions up to 100R002 Description A flaw exists in H3C Magic B3 that allows for remote buffer overflow. The issue is related to the AddMacList function within the /goform/aspForm file. Manipulation of the param argument can trigg...
CVE-2025-57578
An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...
CVE-2025-57578
An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...
PT-2025-37323
Name of the Vulnerable Software and Affected Versions: H3C Magic M Device versions M2V100R006 Description: An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code by using the default password. Recommendations: Change the default password for H3C Magic M Devic...
VulnCheck KEV: CVE-2023-33629
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm...
CVE-2024-38902
H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-38903
H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...
CVE-2024-42638
H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2023-29914
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm...
CVE-2023-34937
A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2023-34930
A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2023-34928
A stack overflow in the EditBasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2023-34936
A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2023-34935
A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service DoS via a crafted POST request...