Magic Be18000
Approved changes feed: RSS · Atom
cpe:2.3:a:h3c:magic_be18000:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | H3C (17378f50-e353-55bc-ad2a-c62425dcc44c) |
|---|---|
| Product | Magic Be18000 (215102c6-d4df-57b0-93dc-bf66415214b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3546 |
vulnerable | 2026-06-08 07:23:09.321451 |
H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection
HIGH (8)
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getLanguage of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Published: 2025-04-14T01:31:07.222Z
Updated: 2025-04-14T15:54:23.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3545 |
vulnerable | 2026-06-08 07:23:09.320511 |
H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection
HIGH (8)
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/setLanguage of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Published: 2025-04-14T01:00:09.263Z
Updated: 2025-04-14T15:55:20.861Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3544 |
vulnerable | 2026-06-08 07:23:09.319928 |
H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection
HIGH (8)
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getCapabilityWeb of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Published: 2025-04-14T00:31:07.721Z
Updated: 2025-04-14T15:56:21.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3539 |
vulnerable | 2026-06-08 07:23:09.316471 |
H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection
HIGH (8)
A vulnerability classified as critical has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getBasicInfo of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Published: 2025-04-13T22:00:13.331Z
Updated: 2025-04-14T19:15:25.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2732 |
vulnerable | 2026-06-08 07:16:58.145668 |
H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection
HIGH (8)
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/wizard/getWifiNeighbour of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Published: 2025-03-25T04:00:07.714Z
Updated: 2025-04-11T20:05:45.701Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2731 |
vulnerable | 2026-06-08 07:16:58.144830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2730 |
vulnerable | 2026-06-08 07:16:58.144198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2729 |
vulnerable | 2026-06-08 07:16:58.143388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2726 |
vulnerable | 2026-06-08 07:16:58.141575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2725 |
vulnerable | 2026-06-08 07:16:58.140742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.