H3c Magic R100 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names H3c Magic R100 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (28)

• CVE-2022-34598 — CVSS 9.8 (critical): The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.
• CVE-2022-30909 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.
• CVE-2022-30910 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.
• CVE-2022-30912 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.
• CVE-2022-30913 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at…
• CVE-2022-30914 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.
• CVE-2022-30915 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.
• CVE-2022-30916 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at…
• CVE-2022-30917 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.
• CVE-2022-30918 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.
• CVE-2022-30919 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.
• CVE-2022-30920 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.
• CVE-2022-30921 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at…
• CVE-2022-30922 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.
• CVE-2022-30923 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at…
• CVE-2022-30924 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at…
• CVE-2022-30925 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.
• CVE-2022-30926 — CVSS 9.8 (critical): H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.
• CVE-2022-28940 — CVSS 7.5 (high): In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through…
• CVE-2023-27801 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This…
• CVE-2023-27802 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This…
• CVE-2023-27803 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This…
• CVE-2023-27804 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This…
• CVE-2023-27805 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This…
• CVE-2023-27806 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. This…
• CVE-2023-27807 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This…
• CVE-2023-27808 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This…
• CVE-2023-27810 — CVSS 4.9 (medium): H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. This…