CVE-2025-3544 - H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection

Back Back to CVE browser

HIGH

H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection

Published Apr 14, 2025

8.6

HIGH

CVSS 4.0

EPSS 1.06%

Description

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getCapabilityWeb of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Affected products

Vendor H3C Product Magic BE18000 Default
n/a
- Version
  V100R014
  Status
  affected
  Constraints
  -
Vendor H3C Product Magic NX15 Default
n/a
- Version
  V100R014
  Status
  affected
  Constraints
  -
Vendor H3C Product Magic NX30 Pro Default
n/a
- Version
  V100R014
  Status
  affected
  Constraints
  -
Vendor H3C Product Magic NX400 Default
n/a
- Version
  V100R014
  Status
  affected
  Constraints
  -
Vendor H3C Product Magic R3010 Default
n/a
- Version
  V100R014
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

H3C

Magic BE18000

n/a

Version	Status	Constraints
V100R014	affected	-

H3C

Magic NX15

n/a

Version	Status	Constraints
V100R014	affected	-

H3C

Magic NX30 Pro

n/a

Version	Status	Constraints
V100R014	affected	-

H3C

Magic NX400

n/a

Version	Status	Constraints
V100R014	affected	-

H3C

Magic R3010

n/a

Version	Status	Constraints
V100R014	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-77

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10861
Advisory
https://gist.github.com/isstabber/05dfeefa3685a369b8802626e0252e27
exploit
https://vuldb.com/?ctiid.304583
signaturepermissions-required
https://vuldb.com/?id.304583
vdb-entrytechnical-description
https://vuldb.com/?submit.524743
third-party-advisory
https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/
patch
https://zhiliao.h3c.com/theme/details/229784
related

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10861		Advisory
https://gist.github.com/isstabber/05dfeefa3685a369b8802626e0252e27		exploit
https://vuldb.com/?ctiid.304583		signaturepermissions-required
https://vuldb.com/?id.304583		vdb-entrytechnical-description
https://vuldb.com/?submit.524743		third-party-advisory
https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/		patch
https://zhiliao.h3c.com/theme/details/229784		related