H3c Magic R100 Firmware
28 CVEs affecting H3c Magic R100 Firmware. Latest disclosed: 2023-04-07. Critical: 18, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-34598 | Critical | 9.8 | 2022-07-06 | The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands. |
CVE-2022-30926 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm. |
CVE-2022-30925 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm. |
CVE-2022-30924 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/aspForm. |
CVE-2022-30923 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goform/aspForm. |
CVE-2022-30922 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm. |
CVE-2022-30921 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm. |
CVE-2022-30920 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm. |
CVE-2022-30919 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm. |
CVE-2022-30918 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm. |
CVE-2022-30917 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm. |
CVE-2022-30916 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm. |
CVE-2022-30915 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm. |
CVE-2022-30914 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm. |
CVE-2022-30913 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm. |
CVE-2022-30912 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm. |
CVE-2022-30910 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm. |
CVE-2022-30909 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm. |
CVE-2022-28940 | High | 7.5 | 2022-05-04 | In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out… |
CVE-2023-27810 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. This vulnerability allows… |