Vulnerabilidades em H3C

54 resultados
Análise Vexday

A H3C apresenta 46 vulnerabilidades catalogadas, com 5 divulgações nos últimos 90 dias, indicando atividade contínua de descobertas. Nenhuma das falhas está sob exploração ativa conhecida (KEV) e não há críticas em CVSS, reduzindo o risco imediato. A fraqueza dominante é CWE-74 (manipulação imprópria de entrada/comando), padrão em equipamentos de rede e que requer atenção em configurações defensivas.

CVE-2026-3943MEDIUMH3C ACG1000-AK230 aaa_portal_auth_local_submit command injectionEPSS 39.5%CVE-2025-2725HIGHH3C Magic BE18000 HTTP POST Request auth command injectionEPSS 7.9%CVE-2026-18814HIGHH3C NX15 esps reload.reload_config command injectionEPSS 2.7%CVE-2026-18900HIGHH3C NX15 Backend RPC esps file.exec os command injectionEPSS 2.4%CVE-2026-18902HIGHH3C NX15 esps repeaterproc command injectionEPSS 2.4%CVE-2023-5142LOWH3C ER6300G2 Config File userLogin.asp path traversalEPSS 2.3%CVE-2026-18813HIGHH3C NX15 esps delete command injectionEPSS 2.3%CVE-2026-18812HIGHH3C NX15 esps esps.ipv6.wan command injectionEPSS 2.3%CVE-2026-18811HIGHH3C NX15 esps add command injectionEPSS 2.3%CVE-2025-3546HIGHH3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injectionEPSS 1.7%CVE-2025-3545HIGHH3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injectionEPSS 1.2%CVE-2025-3544HIGHH3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injectionEPSS 1.2%CVE-2025-3543HIGHH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injectionEPSS 1.2%CVE-2025-3539HIGHH3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injectionEPSS 1.2%CVE-2025-3542HIGHH3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injectionEPSS 1.2%CVE-2025-3540HIGHH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injectionEPSS 1.2%CVE-2025-3541HIGHH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injectionEPSS 1.1%CVE-2023-2676MEDIUMH3C R160 aspForm stack-based overflowEPSS 1.0%CVE-2025-2732HIGHH3C Magic BE18000 HTTP POST Request getWifiNeighbour command injectionEPSS 1.0%CVE-2025-2726HIGHH3C Magic BE18000 HTTP POST Request esps command injectionEPSS 1.0%