CVE-2025-3542

H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection

State: Published
Severity: 8.6 High
Published: Apr 13, 2025
Updated: Apr 14, 2025
Reserved: Apr 13, 2025

Description

A vulnerability, which was classified as critical, was found in H3C Magic NX15, Magic NX400 and Magic R3010 up to V100R014. This affects the function FCGI_WizardProtoProcess of the file /api/wizard/getsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Scores

CVSS	Score	Vector	Source
4.0	8.6 High	CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	VulDB
3.1	8.0 High	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	VulDB
3.0	8.0 High	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	VulDB
2.0	7.7 High	AV:A/AC:L/Au:S/C:C/I:C/A:C	VulDB

Weaknesses

CWE-77 Command Injection
CWE-74 Injection

Affected Products

Product	Versions
Magic NX15H3C	V100R014Affected
Magic NX400H3C	V100R014Affected
Magic R3010H3C	V100R014Affected

References

VDB-304581 | H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injectionvdb-entrytechnical-description
VDB-304581 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
Submit #524738 | H3C Technologies Co., Ltd. H3C Magic NX30 Pro \ Magic NX15 \ H3C NX400 \ H3C Magic R3010 <=V100R014 Command Injectionthird-party-advisory
https://gist.github.com/mono7s/dd7a0a1ec444bb2c228590d298e37a5dexploit
https://zhiliao.h3c.com/theme/details/229784related
https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/patch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.