Gửi #520390: H3C Technologies Co., Ltd. H3C Magic NX15\H3C NX400\H3C Magic R3010\H3C Magic BE18000\H3C Magic NX30 Pro <=V100R014 Remote code executionthông tin

tiêu đềH3C Technologies Co., Ltd. H3C Magic NX15\H3C NX400\H3C Magic R3010\H3C Magic BE18000\H3C Magic NX30 Pro <=V100R014 Remote code execution
Mô tảIn the H3C Magic series products, H3C Magic NX15 allows an attacker to send a specially crafted POST request to the /api/login/auth route without authorization, enabling remote code execution with the highest privileges.
Nguồn⚠️ https://github.com/ZIKH26/CVE-information/blob/master/H3C/Vulnerability%20Information_1.md
Người dùng
 ZIKH26 (UID 61938)
Đệ trình14/03/2025 06:40 (cách đây 2 những năm)
Kiểm duyệt24/03/2025 13:59 (10 days later)
Trạng tháiđược chấp nhận
Mục VulDB300745 [H3C Magic BE18000 đến V100R014 HTTP POST Request /api/login/auth nâng cao đặc quyền]
điểm16

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!