| शीर्षक | H3C Technologies Co., Ltd. H3C Magic NX30 Pro <=V100R007 Remote code execution |
|---|
| विवरण | In the H3C Magic series products, H3C Magic NX30 Pro and H3C NX400 allow an attacker to send a specially crafted POST request to the /api/wizard/getNetworkConf route without authorization, enabling remote code execution with the highest privileges. |
|---|
| स्रोत | ⚠️ https://github.com/ggstrunk/CVE/blob/main/wizard_getNetworkStatus.md |
|---|
| उपयोगकर्ता | trunk (UID 82786) |
|---|
| सबमिशन | 14/03/2025 07:03 AM (2 साल पहले) |
|---|
| संयम | 24/03/2025 01:59 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 300747 [H3C Magic NX30 Pro तक V100R007 HTTP POST Request getNetworkStatus अधिकार वृद्धि] |
|---|
| अंक | 16 |
|---|