h3c vulnerabilities

Recent CVEs affecting h3c products. 22 tracked.

h3c has 22 tracked vulnerabilities, 10 critical. A fixed release or vendor patch exists for 12. Most recent: 2026-03-08. Highest priority: CVE-2024-52765 (score 71/100).

CVE-2025-14015 HIGH 8.8 UPGRADE A weakness has been identified in H3C Magic B0 up to 100R002
CVE-2025-44653 HIGH 7.5 MITIGATE In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf
CVE-2024-57482 CRITICAL 9.8 MITIGATE H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wir
CVE-2024-57480 CRITICAL 9.8 MITIGATE H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP con
CVE-2024-57479 CRITICAL 9.8 MITIGATE H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac ad
CVE-2024-57473 CRITICAL 9.8 MITIGATE H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac ad
CVE-2024-57471 CRITICAL 9.8 MITIGATE H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G w
CVE-2026-3701 HIGH 8.8 UPGRADE A security vulnerability has been detected in H3C Magic B1 up to 100R004
CVE-2025-60262 CRITICAL 9.8 MITIGATE MITIGATE An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, the
CVE-2025-5162 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02 up to 20250513
CVE-2025-5161 MEDIUM 4.3 UPGRADE A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513
CVE-2025-5160 MEDIUM 4.3 UPGRADE A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513
CVE-2025-5159 MEDIUM 4.3 UPGRADE A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513
CVE-2025-5158 MEDIUM 4.3 UPGRADE A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513
CVE-2025-5157 MEDIUM 4.3 UPGRADE A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513
CVE-2025-5156 HIGH 8.8 UPGRADE A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical
CVE-2025-57295 HIGH 8.0 MITIGATE H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure defaul
CVE-2025-3546 HIGH 8.0 UPGRADE UPGRADE A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to
CVE-2024-52765 CRITICAL 9.8 MITIGATE H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter.
CVE-2024-42639 CRITICAL 9.8 MITIGATE H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log
CVE-2024-42638 CRITICAL 9.8 MITIGATE H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which all
CVE-2024-42637 CRITICAL 9.8 MITIGATE H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allow

FAQ

How do I fix h3c vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is h3c being exploited right now?

None of the tracked h3c CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which h3c CVE should I patch first?

CVE-2024-52765 currently ranks highest (71/100): H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter..

Products

RSS feed for h3c · ← Back to latest CVEs