H3
Vendor
H3c
361
CVEs
0
On KEV
6
New 30D
Products
MN9.9
Magic NX15
H3C
6 CVEs0 on KEV4 new
CV9.8
CVM
H3C
1 CVEs0 on KEV1 new
HF3.1
HDM Family-A G5
H3C
1 CVEs0 on KEV1 new
MR9.8
Magic R100 Firmware
H3c
28 CVEs0 on KEV0 new
MR9.8
Magic R200 Firmware
H3c
25 CVEs0 on KEV0 new
GF9.8
Gr-1200w Firmware
H3c
21 CVEs0 on KEV0 new
MN7.8
Magic Nx18 Plus Firmware
H3c
20 CVEs0 on KEV0 new
MR7.2
Magic R300-2100m Firmware
H3c
17 CVEs0 on KEV0 new
HF9.8
H200 Firmware
H3c
16 CVEs0 on KEV0 new
MN8.0
Magic NX30 Pro
H3C
15 CVEs0 on KEV0 new
MN8.0
Magic NX400
H3C
15 CVEs0 on KEV0 new
MN8.0
Magic NX15
H3C
14 CVEs0 on KEV0 new
MR8.0
Magic R3010
H3C
14 CVEs0 on KEV0 new
BM7.8
B5 Mini Firmware
H3c
11 CVEs0 on KEV0 new
MA7.5
Magic
H3c
11 CVEs0 on KEV0 new
MB9.8
Magic B1st Firmware
H3c
11 CVEs0 on KEV0 new
MB8.0
Magic BE18000
H3C
10 CVEs0 on KEV0 new
NX7.3
NX15
H3C
9 CVEs0 on KEV0 new
SS9.8
Seccenter Smp-1114p02
H3c
6 CVEs0 on KEV0 new
SS9.8
SecCenter SMP-E1114P02
H3C
6 CVEs0 on KEV0 new
NF9.8
N12 Firmware
H3c
5 CVEs0 on KEV0 new
MB9.8
Magic B0
H3C
4 CVEs0 on KEV0 new
MB8.8
Magic B1
H3C
4 CVEs0 on KEV0 new
GR9.8
GR-1800AX
H3C
3 CVEs0 on KEV0 new
GR9.8
GR-5400AX
H3C
3 CVEs0 on KEV0 new
GR9.8
GR-1100-P
H3C
2 CVEs0 on KEV0 new
GF9.8
Gr-1800ax Firmware
H3c
2 CVEs0 on KEV0 new
GR8.8
GR-3000AX
H3C
2 CVEs0 on KEV0 new
GF7.8
Gr2200 Firmware
H3c
2 CVEs0 on KEV0 new
MB8.8
Magic B3
H3C
2 CVEs0 on KEV0 new
MR9.8
Magic R230
H3c
2 CVEs0 on KEV0 new
MR9.8
Magic R230 Firmware
H3c
2 CVEs0 on KEV0 new
AF9.8
A210-g Firmware
H3c
1 CVEs0 on KEV0 new
AC7.3
ACG1000-AK230
H3C
1 CVEs0 on KEV0 new
ER5.3
ER2100n
H3C
1 CVEs0 on KEV0 new
EF5.3
Er2100n Firmware
H3c
1 CVEs0 on KEV0 new
ER5.3
ER2200G2
H3C
1 CVEs0 on KEV0 new
EF5.3
Er2200g2 Firmware
H3c
1 CVEs0 on KEV0 new
ER5.3
ER3200G2
H3C
1 CVEs0 on KEV0 new
EF5.3
Er3200g2 Firmware
H3c
1 CVEs0 on KEV0 new
ER5.3
ER3260G2
H3C
1 CVEs0 on KEV0 new
EF5.3
Er3260g2 Firmware
H3c
1 CVEs0 on KEV0 new
ER5.3
ER5100G2
H3C
1 CVEs0 on KEV0 new
EF5.3
Er5100g2 Firmware
H3c
1 CVEs0 on KEV0 new
ER5.3
ER5200G2
H3C
1 CVEs0 on KEV0 new
EF5.3
Er5200g2 Firmware
H3c
1 CVEs0 on KEV0 new
ER5.3
ER6300G2
H3C
1 CVEs0 on KEV0 new
EF5.3
Er6300g2 Firmware
H3c
1 CVEs0 on KEV0 new
ER9.8
Er8300g2-x
H3c
1 CVEs0 on KEV0 new
FV–
F1000-e Vpn Firewall
H3c
1 CVEs0 on KEV0 new
GF5.3
Gr-1100-p Firmware
H3c
1 CVEs0 on KEV0 new
GR5.3
GR-1108-P
H3C
1 CVEs0 on KEV0 new
GF5.3
Gr-1108-p Firmware
H3c
1 CVEs0 on KEV0 new
GR5.3
GR-1200W
H3C
1 CVEs0 on KEV0 new
GR5.3
GR-2200
H3C
1 CVEs0 on KEV0 new
GF5.3
Gr-2200 Firmware
H3c
1 CVEs0 on KEV0 new
GR5.3
GR-3200
H3C
1 CVEs0 on KEV0 new
GF5.3
Gr-3200 Firmware
H3c
1 CVEs0 on KEV0 new
GR5.3
GR-5200
H3C
1 CVEs0 on KEV0 new
GF5.3
Gr-5200 Firmware
H3c
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112373 | MN Magic NX15 H3C | 6.5 | Oct 19 | H3C Magic NX15 usrlist sub_416874 stack-based overflow |
| CVE-2026-112372 | MN Magic NX15 H3C | 6.6 | Oct 19 | H3C Magic NX15 upload importprofile path traversal |
| CVE-2026-112371 | MN Magic NX15 H3C | 9.9 | Oct 19 | H3C Magic NX15 RPC esps write code injection |
| CVE-2026-112370 | MN Magic NX15 H3C | 9.9 | Oct 19 | H3C Magic NX15 usrlist sub_416874 os command injection |
| CVE-2026-65197 | HF HDM Family-A G5 H3C | 3.1 | Oct 13 | H3C G3/G5 HDM Firmware Verification Key Replacement |
| CVE-2023-54405 | CV CVM H3C | 9.8 | Oct 2 | H3C CVM Unauthenticated File Upload via fileUpload/upload Token |
| CVE-2026-18902 | NX NX15 H3C | 7.2 | Aug 5 | H3C NX15 esps repeaterproc command injection |
| CVE-2026-18901 | NX NX15 H3C | 7.2 | Aug 5 | H3C NX15 Web API esps service.add routine |
| CVE-2026-18900 | NX NX15 H3C | 7.2 | Aug 5 | H3C NX15 Backend RPC esps file.exec os command injection |
| CVE-2026-18814 | NX NX15 H3C | 7.2 | Aug 4 | H3C NX15 esps reload.reload_config command injection |
| CVE-2026-18813 | NX NX15 H3C | 7.2 | Aug 4 | H3C NX15 esps delete command injection |
| CVE-2026-18812 | NX NX15 H3C | 7.2 | Aug 4 | H3C NX15 esps esps.ipv6.wan command injection |
| CVE-2026-18811 | NX NX15 H3C | 7.2 | Aug 4 | H3C NX15 esps add command injection |
| CVE-2026-18810 | NX NX15 H3C | 7.3 | Aug 4 | H3C NX15 networkSetup missing authentication |
| CVE-2026-15907 | SF SecPath F1000-C8300 H3C | 7.3 | Jul 15 | H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injection |
| CVE-2026-15479 | NX NX15 H3C | 7.3 | Jul 12 | H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery |
| CVE-2026-10259 | MB Magic B0 H3C | 8.8 | Jun 1 | H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow |
| CVE-2026-9393 | MB Magic B0 H3C | 8.8 | May 24 | H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow |
| CVE-2026-8764 | MB Magic B3 H3C | 7.2 | May 17 | H3C Magic B3 aspForm UpdateWanParams buffer overflow |
| CVE-2026-6581 | MB Magic B1 H3C | 8.8 | Apr 19 | H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow |
| CVE-2026-6563 | MB Magic B1 H3C | 8.8 | Apr 19 | H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow |
| CVE-2026-6560 | MB Magic B0 H3C | 8.8 | Apr 19 | H3C Magic B0 aspForm Edit_BasicSSID buffer overflow |
| CVE-2026-3943 | AC ACG1000-AK230 H3C | 7.3 | Mar 11 | H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection |
| CVE-2026-3701 | MB Magic B1 H3C | 8.8 | Mar 8 | H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflow |
| CVE-2025-60262 | MB Magic Ba1500l Firmware H3c | 9.8 | Jan 6 | An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd |
| CVE-2025-14196 | MB Magic B1 H3C | 8.8 | Dec 7 | H3C Magic B1 aspForm sub_44de0 buffer overflow |
| CVE-2025-14015 | MB Magic B0 H3C | 9.8 | Dec 4 | H3C Magic B0 aspForm EditWlanMacList buffer overflow |
| CVE-2025-10942 | MB Magic B3 H3C | 8.8 | Sep 25 | H3C Magic B3 aspForm EditMacList buffer overflow |
| CVE-2025-57295 | MN Magic Nx15 Firmware H3c | 8.0 | Sep 18 | H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials |
| CVE-2025-8907 | MN M2 NAS H3C | 7.0 | Aug 13 | H3C M2 NAS Webserver Configuration unnecessary privileges |
| CVE-2025-44653 | GF Gr2200 Firmware H3c | 7.5 | Jul 21 | In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf |
| CVE-2025-6091 | GR GR-3000AX H3C | 8.8 | Jun 15 | H3C GR-3000AX aspForm UpdateIpv6Params buffer overflow |
| CVE-2025-6090 | GR GR-5400AX H3C | 8.8 | Jun 15 | H3C GR-5400AX aspForm UpdateIpv6params buffer overflow |
| CVE-2025-5162 | SS SecCenter SMP-E1114P02 H3C | 9.8 | May 26 | H3C SecCenter SMP-E1114P02 importFile unrestricted upload |
| CVE-2025-5161 | SS SecCenter SMP-E1114P02 H3C | 7.5 | May 26 | H3C SecCenter SMP-E1114P02 download operationDailyOut path traversal |
| CVE-2025-5160 | SS SecCenter SMP-E1114P02 H3C | 7.5 | May 26 | H3C SecCenter SMP-E1114P02 download path traversal |
| CVE-2025-5159 | SS SecCenter SMP-E1114P02 H3C | 7.5 | May 25 | H3C SecCenter SMP-E1114P02 download path traversal |
| CVE-2025-5158 | SS SecCenter SMP-E1114P02 H3C | 7.5 | May 25 | H3C SecCenter SMP-E1114P02 downloadSoftware path traversal |
| CVE-2025-5157 | SS SecCenter SMP-E1114P02 H3C | 7.5 | May 25 | H3C SecCenter SMP-E1114P02 fileContent path traversal |
| CVE-2025-5156 | GR GR-5400AX H3C | 9.8 | May 25 | H3C GR-5400AX aspForm EditWlanMacList buffer overflow |
| CVE-2025-4998 | MR Magic R200G H3C | 6.5 | May 20 | H3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of service |
| CVE-2025-4997 | R2 R2+ProG H3C | 6.5 | May 20 | H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of service |
| CVE-2025-4446 | GR GR-5400AX H3C | 8.0 | May 9 | H3C GR-5400AX aspForm Edit_List_SSID buffer overflow |
| CVE-2025-4440 | GR GR-1800AX H3C | 8.0 | May 8 | H3C GR-1800AX aspForm EnableIpv6 buffer overflow |
| CVE-2025-3854 | GR GR-3000AX H3C | 8.0 | Apr 22 | H3C GR-3000AX HTTP POST Request aspForm Edit_List_SSID buffer overflow |
| CVE-2025-3546 | MN Magic NX15 H3C | 8.0 | Apr 14 | H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection |
| CVE-2025-3545 | MN Magic NX15 H3C | 8.0 | Apr 14 | H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection |
| CVE-2025-3544 | MN Magic NX30 Pro H3C | 8.0 | Apr 14 | H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection |
| CVE-2025-3543 | MN Magic NX30 Pro H3C | 8.0 | Apr 14 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection |
| CVE-2025-3542 | MR Magic R3010 H3C | 8.0 | Apr 13 | H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection |
| CVE-2025-3541 | MN Magic NX30 Pro H3C | 8.0 | Apr 13 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection |
| CVE-2025-3540 | MR Magic R3010 H3C | 8.0 | Apr 13 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection |
| CVE-2025-3539 | MR Magic R3010 H3C | 8.0 | Apr 13 | H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection |
| CVE-2025-2732 | MN Magic NX15 H3C | 8.0 | Mar 25 | H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection |
| CVE-2025-2731 | MR Magic R3010 H3C | 8.0 | Mar 25 | H3C Magic BE18000 HTTP POST Request getDualbandSync command injection |
| CVE-2025-2730 | MN Magic NX15 H3C | 8.0 | Mar 25 | H3C Magic BE18000 HTTP POST Request getssidname command injection |
| CVE-2025-2729 | MN Magic NX400 H3C | 8.0 | Mar 25 | H3C Magic BE18000 HTTP POST Request networkSetup command injection |
| CVE-2025-2728 | MN Magic NX400 H3C | 8.0 | Mar 25 | H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection |
| CVE-2025-2727 | MN Magic NX30 Pro H3C | 8.0 | Mar 25 | H3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injection |
| CVE-2025-2726 | MN Magic NX30 Pro H3C | 8.0 | Mar 25 | H3C Magic BE18000 HTTP POST Request esps command injection |
