← Back

Magic Nx400 Firmware

magic_nx400_firmware

Vendor: H3c • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-3546
1H3c
6Magic Be18000 Firmware
Magic Be1800 FirmwareMagic Nx15 Firmware+3 more
Jun 17, 2026
Apr 14, 2025
8.6 HIGH· v4
8.0 HIGH· v3
7.7 HIGH· v2
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGI_CheckStringIfC...Show more
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getLanguage of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.Show less