CVE-2025-2731

creationtimestamp| type| source ---|---|--- 2025-03-25 04:23:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8590 2025-03-25 04:48:25+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114221259483812837 2025-03-25 05:00:34+00:00|...

CVE-2025-2731 H3C Magic BE18000 HTTP POST Request getDualbandSync command injection

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/wizard/getDualbandSync of the component HTTP POST Request Handler...