CVE-2025-4997

CVE-2025-4997 affects H3C R2+ProG up to version 200R004. The HTTP POST Request Handler’s /goform/aspForm, specifically UpdateWanParams/AddMacList/EditMacList/AddWlanMacList/EditMacList/Edit_BasicSSID/Edit_GuestSSIDFor2P4G/Edit_BasicSSID_5G/SetAPInfoById, handles the param argument insecurely, lea...

CVE-2025-4997 H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of service

A vulnerability, which was classified as problematic, was found in H3C R2+ProG up to 200R004. Affected is the function UpdateWanParams/AddMacList/EditMacList/AddWlanMacList/EditWlanMacList/EditBasicSSID/EditGuestSSIDFor2P4G/EditBasicSSID5G/SetAPInfoById of the file /goform/aspForm of the componen...

CVE-2025-4997 H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of service

A vulnerability, which was classified as problematic, was found in H3C R2+ProG up to 200R004. Affected is the function UpdateWanParams/AddMacList/EditMacList/AddWlanMacList/EditWlanMacList/EditBasicSSID/EditGuestSSIDFor2P4G/EditBasicSSID5G/SetAPInfoById of the file /goform/aspForm of the componen...

H3C Magic R200G 安全漏洞

The H3C Magic R200G is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200G 100R002 and prior versions, which stems from improper handling of the parameter param by the HTTP POST request handler, which could result in a denial of service...

H3C R2+ProG 安全漏洞

The H3C R2+ProG is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C R2+ProG 200R004 and prior versions, which stems from improper handling of the parameter param by the HTTP POST request handler, which could result in a denial of service...

PT-2025-22308 · H3C · H3C Magic R200

Name of the Vulnerable Software and Affected Versions: H3C Magic R200G versions up to 100R002 Description: A vulnerability has been found in the HTTP POST Request Handler component, specifically affecting the function Edit BasicSSID, Edit BasicSSID 5G, SetAPWifiorLedInfoById, SetMobileAPInfoById,...

PT-2025-22296 · H3C · H3C R2+Prog

Name of the Vulnerable Software and Affected Versions: H3C R2+ProG versions up to 200R004 Description: A problematic issue was found in the HTTP POST Request Handler component, specifically in the function UpdateWanParams/AddMacList/EditMacList/AddWlanMacList/EditWlanMacList/Edit BasicSSID/Edit...

Weak Password Vulnerability in H3C ER5100G2 of Xinhua San Technologies Co.

The H3C ER5100G2 is an enterprise-class Gigabit high-performance router. A weak password vulnerability exists in the H3C ER5100G2 of Xinhua San Technologies Limited, which can be exploited by an attacker to log into the system and obtain sensitive information...

CVE-2025-4446

A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function EditListSSID of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack needs to be approached within the local network...

CVE-2025-4440

A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. Access to the local network is required for this attack to succeed...

CVE-2025-4446

A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function EditListSSID of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack needs to be approached within the local network...

CVE-2025-4446 H3C GR-5400AX aspForm Edit_List_SSID buffer overflow

A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function EditListSSID of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack needs to be approached within the local network...

CVE-2025-4446 H3C GR-5400AX aspForm Edit_List_SSID buffer overflow

A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function EditListSSID of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack needs to be approached within the local network...

CVE-2025-4446

CVE-2025-4446 affects H3C GR-5400AX (up to version 100R008). The vulnerability lies in the Edit_List_SSID function in /goform/aspForm, where manipulation of the param argument triggers a buffer overflow. Exploitation is described as viable when the attacker is on the same local network. Red Hat a...

Denial of Service Vulnerability in H3C NX54 of Xinhua San Technologies Co.

The H3C NX54 is a Gigabit dual-band router that supports the Wi-Fi 6 802.11ax protocol. A denial of service vulnerability exists in the H3C NX54 of Xinhua San Technologies Co. that can be exploited by attackers to cause a denial of service...

PT-2025-20444 · H3C · H3C Gr-5400Ax

Name of the Vulnerable Software and Affected Versions: H3C GR-5400AX versions up to 100R008 Description: A critical issue has been found that affects the Edit List SSID function of the /goform/aspForm file. The manipulation of the param argument leads to a buffer overflow. This issue can be...

Denial of Service Vulnerability in H3C N12 of Xinhua San Technologies Co.

The H3C N12 is a wireless router from China's Xinhua San H3C. A denial of service vulnerability exists in the H3C N12 of Xinhua San Technologies Co. that can be exploited by attackers to cause a denial of service...

Command Execution Vulnerability in H3C NX54 of Xinhua San Technologies Co.

The H3C NX54 is a Gigabit dual-band router that supports the Wi-Fi 6 802.11ax protocol. A command execution vulnerability exists in the H3C NX54 of Xinhua San Technologies Co. that can be exploited by an attacker to execute commands...

CVE-2025-4440

A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. Access to the local network is required for this attack to succeed...

CVE-2025-4440 H3C GR-1800AX aspForm EnableIpv6 buffer overflow

A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. Access to the local network is required for this attack to succeed...