What’s Vulnerable › Products
H3C Magic NX15 vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.
Check whether your H3C Magic NX15 version is affected
Latest H3C Magic NX15 vulnerabilities
- CVE-2026-112373 — H3C Magic NX15 usrlist sub_416874 stack-based overflow (CVSS 6.5)
- CVE-2026-112372 — H3C Magic NX15 upload importprofile path traversal (CVSS 6.6)
- CVE-2026-112371 — H3C Magic NX15 RPC esps write code injection (CVSS 9.9)
- CVE-2026-112370 — H3C Magic NX15 usrlist sub_416874 os command injection (CVSS 9.9)
- CVE-2025-3545 — H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection (CVSS 8.0)
- CVE-2025-3544 — H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection (CVSS 8.0)
- CVE-2025-3543 — H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection (CVSS 8.0)
- CVE-2025-3542 — H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection (CVSS 8.0)
- CVE-2025-3541 — H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection (CVSS 8.0)
- CVE-2025-3540 — H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection (CVSS 8.0)
- CVE-2025-3539 — H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection (CVSS 8.0)
- CVE-2025-2732 — H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection (CVSS 8.0)
- CVE-2025-2731 — H3C Magic BE18000 HTTP POST Request getDualbandSync command injection (CVSS 8.0)
- CVE-2025-2730 — H3C Magic BE18000 HTTP POST Request getssidname command injection (CVSS 8.0)
- CVE-2025-2729 — H3C Magic BE18000 HTTP POST Request networkSetup command injection (CVSS 8.0)
- CVE-2025-2726 — H3C Magic BE18000 HTTP POST Request esps command injection (CVSS 8.0)
- CVE-2025-2725 — H3C Magic BE18000 HTTP POST Request auth command injection (CVSS 8.0)