CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

H3C Magic R230 Security Vulnerability

H3C Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R230 V100R002 version, which originates from the udpserver opening port 9034 allowing an attacker to execute arbitrary commands...

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

PT-2024-28270 · H3C · H3C Magic R230

Name of the Vulnerable Software and Affected Versions: H3C Magic R230 version V100R002 Description: A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. Recommendations: For H3C Magic R230 version V100R002, consider changing the hardcoded passwor...

CVE-2024-38902

CVE-2024-38902 affects H3C Magic R230, specifically version V100R002. The description across sources confirms a hardcoded password in /etc/shadow that can allow an attacker to log in as root. Public records from NVD/Red Hat/CNVD/CVE entries corroborate the vulnerability details (no exploit specif...

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

CVE-2024-33335

SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file...

CVE-2024-33335

SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file...

CVE-2024-33335

SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file...

H3C SeaSQL DWS SQL Injection Vulnerability

H3C SeaSQL DWS is a distributed analytic database from China's Xinhua San H3C. A SQL injection vulnerability exists in H3C SeaSQL DWS version v.2.0, which originates from a vulnerability that allows remote attackers to execute arbitrary code via a crafted file...

CVE-2024-33335

CVE-2024-33335 concerns a SQL Injection vulnerability in H3C SeaSQL DWS version 2.0 that could allow a remote attacker to execute arbitrary code via a crafted file. The Red Hat/NVD/CNNVD/CVE and PT-Security entries consistently identify SeaSQL DWS 2.0 as affected and describe the issue as SQL inj...

CVE-2023-30311

An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30311

An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30311

An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

PT-2024-12230 · H3C · H3C Magic R100 +1

Name of the Vulnerable Software and Affected Versions: H3C Magic R365 affected versions not specified H3C Magic R100 affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: For H3C...

H3C Magic R100 安全漏洞

H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100, H3C Magic R365, which stems from a vulnerability that allows an attacker to hijack a TCP session, which could lead to a denial of service attack...

CVE-2024-32238

H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface...

CVE-2024-32238

H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface...

CVE-2024-32238

H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface...

CVE-2024-32238

Summary of CVE-2024-32238 (H3C ER8300G2-X) : The ER8300G2-X router is affected by an Incorrect Access Control vulnerability that allows access to the device’s administrative password via the management system page login interface. The credential disclosure is documented in connected sources (Nucl...