H3C kayıtları
h3c üreticisine ait 185 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 9
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-787 Out-of-bounds Write145
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-259 Use of Hard-coded Password2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
185 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
55Planlayın | CVE-2024-32238Kavram kanıtı | H3C ER8300G2-X is vulnerable to Incorrect Access Control.CWE-522 | Kritik9,8 | — | %52,9 | 22 Nis 2024 |
43Planlayın | CVE-2022-34607İstismar yok | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp.h3c · magic r200 firmware · CWE-787 | Kritik9,8 | — | %13,5 | 20 Tem 2022 |
42Planlayın | CVE-2024-52765İstismar yok | H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter.h3c · gr-1800ax firmware · CWE-94 | Kritik9,8 | — | %11,6 | 20 Kas 2024 |
42Planlayın | CVE-2022-37070İstismar yok | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.h3c · gr-1200w firmware · CWE-78 | Kritik9,8 | — | %10,6 | 25 Ağu 2022 |
41Planlayın | CVE-2022-34598İstismar yok | The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.h3c · magic r100 firmware | Kritik9,8 | — | %7,2 | 6 Tem 2022 |
39İzleyin | CVE-2022-30913İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForh3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30912İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30918İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30917İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30926İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30916İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspFormh3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30919İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30920İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30921İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForh3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30924İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/asph3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30915İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30923İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goforh3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30925İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30922İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30914İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30909İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2022-30910İstismar yok | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.h3c · magic r100 firmware · CWE-787 | Kritik9,8 | — | %1,7 | 8 Haz 2022 |
39İzleyin | CVE-2019-12193İstismar yok | H3C H3Cloud OS all versions allows SQL injection via the ear/grid_event sidx parameter.h3c · h3cloud os · CWE-89 | Kritik9,8 | — | %1,5 | 19 Tem 2019 |
39İzleyin | CVE-2022-34610İstismar yok | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app.h3c · magic r200 firmware · CWE-787 | Kritik9,8 | — | %1,4 | 20 Tem 2022 |
39İzleyin | CVE-2022-34609İstismar yok | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp.h3c · magic r200 firmware · CWE-787 | Kritik9,8 | — | %1,4 | 20 Tem 2022 |
- CVE-2024-3223855Planlayın
H3C ER8300G2-X is vulnerable to Incorrect Access Control.
KritikCVSS 9,8Kavram kanıtıEPSS %5322 Nis 2024
- CVE-2022-3460743Planlayın
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp.
KritikCVSS 9,8İstismar yokEPSS %14h3c · magic r200 firmware20 Tem 2022
- CVE-2024-5276542Planlayın
H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter.
KritikCVSS 9,8İstismar yokEPSS %12h3c · gr-1800ax firmware20 Kas 2024
- CVE-2022-3707042Planlayın
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
KritikCVSS 9,8İstismar yokEPSS %11h3c · gr-1200w firmware25 Ağu 2022
- CVE-2022-3459841Planlayın
The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.
KritikCVSS 9,8İstismar yokEPSS %7h3c · magic r100 firmware6 Tem 2022
- CVE-2022-3091339İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspFor
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3091239İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3091839İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3091739İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3092639İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3091639İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3091939İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3092039İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3092139İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspFor
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3092439İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/asp
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3091539İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3092339İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /gofor
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3092539İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3092239İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3091439İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3090939İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2022-3091039İzleyin
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.
KritikCVSS 9,8İstismar yokEPSS %2h3c · magic r100 firmware8 Haz 2022
- CVE-2019-1219339İzleyin
H3C H3Cloud OS all versions allows SQL injection via the ear/grid_event sidx parameter.
KritikCVSS 9,8İstismar yokEPSS %1h3c · h3cloud os19 Tem 2019
- CVE-2022-3461039İzleyin
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app.
KritikCVSS 9,8İstismar yokEPSS %1h3c · magic r200 firmware20 Tem 2022
- CVE-2022-3460939İzleyin
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp.
KritikCVSS 9,8İstismar yokEPSS %1h3c · magic r200 firmware20 Tem 2022