H3C Magic NX15

• CVE-2026-112373 Medium 6.5 H3C Magic NX15 usrlist sub_416874 stack-based overflow 0.5%
• CVE-2026-112372 Medium 6.6 H3C Magic NX15 upload importprofile path traversal 0.5%
• CVE-2026-112371 Critical 9.9 H3C Magic NX15 RPC esps write code injection 0.5%
• CVE-2026-112370 Critical 9.9 H3C Magic NX15 usrlist sub_416874 os command injection 2.0%
• CVE-2025-3546 High 8.0 H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection 1.6%
• CVE-2025-3545 High 8.0 H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection 1.1%
• CVE-2025-3544 High 8.0 H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection 1.1%
• CVE-2025-3543 High 8.0 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection 1.1%
• CVE-2025-3542 High 8.0 H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection 1.1%
• CVE-2025-3541 High 8.0 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection 1.1%
• CVE-2025-3540 High 8.0 H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection 1.1%
• CVE-2025-3539 High 8.0 H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection 1.1%
• CVE-2025-2732 High 8.0 H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection 1.0%
• CVE-2025-2731 High 8.0 H3C Magic BE18000 HTTP POST Request getDualbandSync command injection 1.0%
• CVE-2025-2730 High 8.0 H3C Magic BE18000 HTTP POST Request getssidname command injection 1.0%
• CVE-2025-2729 High 8.0 H3C Magic BE18000 HTTP POST Request networkSetup command injection 1.0%
• CVE-2025-2726 High 8.0 H3C Magic BE18000 HTTP POST Request esps command injection 1.0%
• CVE-2025-2725 High 8.0 H3C Magic BE18000 HTTP POST Request auth command injection 8.3%