CVE-2024-40516

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-16 · updated 2026-06-17
Weakness: CWE-940

Description

An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality.

Affected products

H3C Rc3000 Firmware: rc3000v100r009

References

https://gist.github.com/as-lky/2acc62c6283c7a1fe3af046b05091d15
https://gist.github.com/as-lky/2acc62c6283c7a1fe3af046b05091d15

Get alerted when CVE-2024-40516 or the next vulnerability affects your stack