Skip to content
HH3C
Products
| Product | CVEs | Exploited | Latest |
|---|
| Magic NX15 | 18 | – | Oct 19, 2026 |
| Magic NX30 Pro | 15 | – | Apr 14, 2025 |
| Magic NX400 | 15 | – | Apr 14, 2025 |
| Magic R3010 | 14 | – | Apr 14, 2025 |
| Magic BE18000 | 10 | – | Apr 14, 2025 |
| NX15 | 9 | – | Aug 5, 2026 |
| SecCenter SMP-E1114P02 | 6 | – | May 26, 2025 |
| Magic B1 | 4 | – | Apr 19, 2026 |
| Magic B0 | 4 | – | Jun 1, 2026 |
| GR-5400AX | 3 | – | Jun 15, 2025 |
| GR-3000AX | 2 | – | Jun 15, 2025 |
| Magic B3 | 2 | – | May 17, 2026 |
| GR-1800AX | 2 | – | May 8, 2025 |
| GR-3200 | 1 | – | Sep 24, 2023 |
| GR-5200 | 1 | – | Sep 24, 2023 |
| GR-8300 | 1 | – | Sep 24, 2023 |
| HDM Family-A G5 | 1 | – | Oct 13, 2026 |
| M2 NAS | 1 | – | Aug 13, 2025 |
| Magic R200G | 1 | – | May 20, 2025 |
| R160 | 1 | – | May 12, 2023 |
| R2+ProG | 1 | – | May 20, 2025 |
| ACG1000-AK230 | 1 | – | Mar 11, 2026 |
| SecPath F1000-C8300 | 1 | – | Jul 15, 2026 |
| CVM | 1 | – | Oct 2, 2026 |
| ER2100n | 1 | – | Sep 24, 2023 |
| ER2200G2 | 1 | – | Sep 24, 2023 |
| ER3200G2 | 1 | – | Sep 24, 2023 |
| ER3260G2 | 1 | – | Sep 24, 2023 |
| ER5100G2 | 1 | – | Sep 24, 2023 |
| ER5200G2 | 1 | – | Sep 24, 2023 |
| ER6300G2 | 1 | – | Sep 24, 2023 |
| GR-1100-P | 1 | – | Sep 24, 2023 |
| GR-1108-P | 1 | – | Sep 24, 2023 |
| GR-1200W | 1 | – | Sep 24, 2023 |
| GR-2200 | 1 | – | Sep 24, 2023 |
Exploited and recent CVEs
-
CVE-2026-112373
Medium 6.5
H3C Magic NX15 usrlist sub_416874 stack-based overflow
0.5%
-
CVE-2026-112372
Medium 6.6
H3C Magic NX15 upload importprofile path traversal
0.5%
-
CVE-2026-112371
Critical 9.9
H3C Magic NX15 RPC esps write code injection
0.5%
-
CVE-2026-112370
Critical 9.9
H3C Magic NX15 usrlist sub_416874 os command injection
2.0%
-
CVE-2026-65197
Low 3.1
H3C G3/G5 HDM Firmware Verification Key Replacement
<0.1%
-
CVE-2023-54405
Critical 9.8
H3C CVM Unauthenticated File Upload via fileUpload/upload Token
0.6%
-
CVE-2026-18902
High 7.2
H3C NX15 esps repeaterproc command injection
3.8%
-
CVE-2026-18901
High 7.2
H3C NX15 Web API esps service.add routine
0.8%
-
CVE-2026-18900
High 7.2
H3C NX15 Backend RPC esps file.exec os command injection
3.8%
-
CVE-2026-18814
High 7.2
H3C NX15 esps reload.reload_config command injection
3.6%
-
CVE-2026-18813
High 7.2
H3C NX15 esps delete command injection
3.6%
-
CVE-2026-18812
High 7.2
H3C NX15 esps esps.ipv6.wan command injection
3.6%
-
CVE-2026-18811
High 7.2
H3C NX15 esps add command injection
3.6%
-
CVE-2026-18810
High 7.3
H3C NX15 networkSetup missing authentication
0.7%
-
CVE-2026-15907
High 7.3
H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injection
0.4%
-
CVE-2026-15479
High 7.3
H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery
0.5%
-
CVE-2026-10259
High 8.8
H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow
0.5%
-
CVE-2026-9393
High 8.8
H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow
0.4%
-
CVE-2026-8764
High 7.2
H3C Magic B3 aspForm UpdateWanParams buffer overflow
0.5%
-
CVE-2026-6581
High 8.8
H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow
0.4%
-
CVE-2026-6563
High 8.8
H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow
0.5%
-
CVE-2026-6560
High 8.8
H3C Magic B0 aspForm Edit_BasicSSID buffer overflow
0.5%
-
CVE-2026-3943
High 7.3
H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection
42.6%
-
CVE-2026-3701
High 8.8
H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflow
0.8%
-
CVE-2025-14196
High 8.8
H3C Magic B1 aspForm sub_44de0 buffer overflow
0.5%
-
CVE-2025-14015
High 8.8
H3C Magic B0 aspForm EditWlanMacList buffer overflow
0.9%
-
CVE-2025-10942
High 8.8
H3C Magic B3 aspForm EditMacList buffer overflow
0.8%
-
CVE-2025-8907
High 7.0
H3C M2 NAS Webserver Configuration unnecessary privileges
0.2%
-
CVE-2025-6091
High 8.8
H3C GR-3000AX aspForm UpdateIpv6Params buffer overflow
0.7%
-
CVE-2025-6090
High 8.8
H3C GR-5400AX aspForm UpdateIpv6params buffer overflow
0.7%