vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-2728

H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection

HIGH
8
CVSS Score
Published: March 25, 2025 at 02:31 AM UTC
Updated: June 17, 2026 at 09:07 AM UTC
2 products affected across 1 vendorMagic NX30 ProMagic NX400

Using Magic NX30 Pro by H3C?

Get instant alerts when new vulnerabilities affect Magic NX30 Pro - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8
Exploit prediction
EPSS 1%
SSVC
No known exploit

Description

A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vulnerability affects unknown code of the file /api/wizard/getNetworkConf. The manipulation leads to command injection. The attack needs to be approached within the local network. It is recommended to upgrade the affected component.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (6)

Broken Link
Source: [email protected]
https://github.com/RK1Y8/cve_cve/blob/main/h3c.md
SignaturePermissions Required
Source: [email protected]
https://vuldb.com/?ctiid.300748
VDB EntryTechnical Description
Source: [email protected]
https://vuldb.com/?id.300748
Third Party Advisory
Source: [email protected]
https://vuldb.com/?submit.520462
Patch
Source: [email protected]
https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/
Related
Source: [email protected]
https://zhiliao.h3c.com/theme/details/229784

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8HIGHVulDB
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-74CWE-77

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card