H3C records

185 published records for vendor h3c.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 9
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

185 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
55Plan	CVE-2024-32238Proof of concept	H3C ER8300G2-X is vulnerable to Incorrect Access Control.CWE-522 Pre-auth Info leak	Critical9.8	—	52.9%	Apr 22, 2024
43Plan	CVE-2022-34607No exploit	H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp.h3c · magic r200 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	14.2%	Jul 20, 2022
42Plan	CVE-2024-52765No exploit	H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter.h3c · gr-1800ax firmware · CWE-94 pre-auth RCE	Critical9.8	—	11.6%	Nov 20, 2024
42Plan	CVE-2022-37070No exploit	H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.h3c · gr-1200w firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	10.4%	Aug 25, 2022
41Plan	CVE-2022-34598No exploit	The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.h3c · magic r100 firmware pre-auth RCE	Critical9.8	—	7.1%	Jul 6, 2022
39Monitor	CVE-2022-30913No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForh3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30912No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30918No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30917No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30926No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30916No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspFormh3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30919No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30920No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30921No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForh3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30924No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/asph3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30915No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30923No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goforh3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30925No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30922No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30914No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30909No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2022-30910No exploit	H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.6%	Jun 8, 2022
39Monitor	CVE-2019-12193No exploit	H3C H3Cloud OS all versions allows SQL injection via the ear/grid_event sidx parameter.h3c · h3cloud os · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.4%	Jul 19, 2019
39Monitor	CVE-2022-34610No exploit	H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app.h3c · magic r200 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.4%	Jul 20, 2022
39Monitor	CVE-2022-34609No exploit	H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp.h3c · magic r200 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.4%	Jul 20, 2022

CVE-2024-32238
55Plan
H3C ER8300G2-X is vulnerable to Incorrect Access Control.
CriticalCVSS 9.8Proof of conceptEPSS 52%
- Pre-auth
- Info leak
Apr 22, 2024
CVE-2022-34607
43Plan
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp.
CriticalCVSS 9.8No exploitEPSS 14%
- Pre-auth
- Memory safety
h3c · magic r200 firmwareJul 20, 2022
CVE-2024-52765
42Plan
H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter.
CriticalCVSS 9.8No exploitEPSS 11%
- pre-auth RCE
h3c · gr-1800ax firmwareNov 20, 2024
CVE-2022-37070
42Plan
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
CriticalCVSS 9.8No exploitEPSS 10%
- pre-auth RCE
- Command injection
h3c · gr-1200w firmwareAug 25, 2022
CVE-2022-34598
41Plan
The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
h3c · magic r100 firmwareJul 6, 2022
CVE-2022-30913
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspFor
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30912
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30918
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30917
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30926
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30916
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30919
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30920
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30921
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspFor
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30924
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/asp
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30915
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30923
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /gofor
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30925
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30922
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30914
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30909
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2022-30910
39Monitor
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r100 firmwareJun 8, 2022
CVE-2019-12193
39Monitor
H3C H3Cloud OS all versions allows SQL injection via the ear/grid_event sidx parameter.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
h3c · h3cloud osJul 19, 2019
CVE-2022-34610
39Monitor
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r200 firmwareJul 20, 2022
CVE-2022-34609
39Monitor
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
h3c · magic r200 firmwareJul 20, 2022