Magic NX400 vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MN

Product

Magic NX400

by H3C · last CVE Apr 14, 2025

15

CVEs

0

On KEV

8.0

Max CVSS

0

New 30D

Vulnerabilities15 In the news0 Timeline

Severity mix

Critical 0High 15Medium 0Low 0

Severity

All severities15 Critical0 High15 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Magic NX400 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-3546	8.0	2%	Apr 14	H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection Affected: V100R014
CVE-2025-3545	8.0	1%	Apr 14	H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection Affected: V100R014
CVE-2025-3544	8.0	1%	Apr 14	H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection Affected: V100R014
CVE-2025-3543	8.0	1%	Apr 14	H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection Affected: V100R014
CVE-2025-3542	8.0	1%	Apr 13	H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection Affected: V100R014
CVE-2025-3541	8.0	1%	Apr 13	H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection Affected: V100R014
CVE-2025-3540	8.0	1%	Apr 13	H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection Affected: V100R014
CVE-2025-3539	8.0	1%	Apr 13	H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection Affected: V100R014
CVE-2025-2732	8.0	1%	Mar 25	H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection Affected: V100R014
CVE-2025-2731	8.0	1%	Mar 25	H3C Magic BE18000 HTTP POST Request getDualbandSync command injection Affected: V100R014
CVE-2025-2730	8.0	1%	Mar 25	H3C Magic BE18000 HTTP POST Request getssidname command injection Affected: V100R014
CVE-2025-2729	8.0	1%	Mar 25	H3C Magic BE18000 HTTP POST Request networkSetup command injection Affected: V100R014
CVE-2025-2728	8.0	1%	Mar 25	H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection Affected: V100R014
CVE-2025-2726	8.0	1%	Mar 25	H3C Magic BE18000 HTTP POST Request esps command injection Affected: V100R014
CVE-2025-2725	8.0	8%	Mar 25	H3C Magic BE18000 HTTP POST Request auth command injection Affected: V100R014