CVE-2025-2728

creationtimestamp| type| source ---|---|--- 2025-03-25 03:24:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8587 2025-03-25 04:01:20+00:00| published-proof-of-concept| Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA 2025-03-25 04:48:23+00:00| seen|...

CVE-2025-2728 H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection

A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vulnerability affects unknown code of the file /api/wizard/getNetworkConf. The manipulation leads to command injection. The attack needs to be approached within the local network. ...

CVE-2025-2728

CVE-2025-2728 affects H3C Magic NX30 Pro and Magic NX400 up to V100R014. A vulnerability in the /api/wizard/getNetworkConf endpoint allows command injection, requiring local network access to exploit (per the primary CVE entry). Connected sources corroborate the affected devices and the file path...