CVE-2025-4440 H3C GR-1800AX aspForm EnableIpv6 buffer overflow

A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. Access to the local network is required for this attack to succeed...

CVE-2025-4440

CVE-2025-4440 affects H3C GR-1800AX (up to 100R008). The vulnerability is in the EnableIpv6 function of the file /goform/aspForm, where manipulating the param argument leads to a buffer overflow. Access to the local network is required for exploitation, and the exploit has been disclosed publicly...

H3C GR-5400AX 安全漏洞

The H3C GR-5400AX is an enterprise Wi-Fi 6 wireless controller from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-5400AX 100R008 and prior versions, which stems from a buffer overflow due to incorrect manipulation of the parameter param in file/goform/aspForm...

H3C GR-1800AX 安全漏洞

The H3C GR-1800AX is an enterprise-class wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1800AX 100R008 and prior versions, which originates from a buffer overflow due to the param parameter manipulation of the EnableIpv6 function in the /goform/aspForm...

PT-2025-20437 · H3C · H3C Gr-1800Ax

Name of the Vulnerable Software and Affected Versions: H3C GR-1800AX versions up to 100R008 Description: A critical issue was found, affecting the function EnableIpv6 of the file "/goform/aspForm". The manipulation of the argument param leads to a buffer overflow. Access to the local network is...

Command Execution Vulnerability in H3C Magic NX15000 10 Gigabit Wi-Fi 6 Router from Xinhua San Technology Co.

The H3C Magic NX15000 10 Gigabit Wi-Fi 6 Router is a high-end router for users and groups seeking whole-house coverage and high-quality networking. A command execution vulnerability exists in the H3C Magic NX15000 10 Gigabit Wi-Fi 6 Router from Xinhua San Technologies Co. that can be exploited by...

Unauthorized Access Vulnerability in H3C Magic NX15000 of Xinhua San Technologies Co.

The H3C Magic NX15000 is a 10 Gigabit Wi-Fi 6 router. An unauthorized access vulnerability exists in the H3C Magic NX15000 of Xinhua San Technologies, which can be exploited by attackers to obtain sensitive information...

CVE-2025-3854

A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/EditListSSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argume...

CVE-2025-3854

A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/EditListSSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argume...

CVE-2025-3854 H3C GR-3000AX HTTP POST Request aspForm Edit_List_SSID buffer overflow

A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/EditListSSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argume...

CVE-2025-3854

CVE-2025-3854 affects H3C GR-3000AX (up to V100R006). The vulnerability lies in the HTTP POST Request Handler, specifically the functions EnableIpv6, UpdateWanModeMulti, UpdateIpv6Params, EditWlanMacList, and Edit_List_SSID in the file /goform/aspForm. Manipulation of the param argument leads to ...

CVE-2025-3854 H3C GR-3000AX HTTP POST Request aspForm Edit_List_SSID buffer overflow

A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/EditListSSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argume...

PT-2025-17476 · H3C · H3C Gr-3000Ax

Name of the Vulnerable Software and Affected Versions: H3C GR-3000AX versions up to V100R006 Description: A critical vulnerability was found in the HTTP POST Request Handler component of H3C GR-3000AX. The affected function is EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/Edit Li...

CVE-2025-3546

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGICheckStringIfContainsSemicolon of the file /api/wizard/getLanguage of the component HTTP POS...

CVE-2025-3545

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is the function FCGICheckStringIfContainsSemicolon of the file /api/wizard/setLanguage of the component HTTP POST Request Handler. T...

CVE-2025-3542

A vulnerability, which was classified as critical, was found in H3C Magic NX15, Magic NX400 and Magic R3010 up to V100R014. This affects the function FCGIWizardProtoProcess of the file /api/wizard/getsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command...

CVE-2025-3539

A vulnerability classified as critical has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected is the function FCGICheckStringIfContainsSemicolon of the file /api/wizard/getBasicInfo of the component HTTP POST Request Handler. The...

CVE-2025-3540

A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this vulnerability is the function FCGIWizardProtoProcess of the file /api/wizard/getCapability of the component HTTP POST Request Handler. The manipulation...

CVE-2025-3544

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects the function FCGICheckStringIfContainsSemicolon of the file /api/wizard/getCapabilityWeb of the component HTTP POST Request Handler...

CVE-2025-3541

A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this issue is the function FCGIWizardProtoProcess of the file /api/wizard/getSpecs of the component HTTP POST Request Handler. The...