Vulnerabilities > H3C > High

DATE CVE VULNERABILITY TITLE RISK
2022-08-25 CVE-2022-36510 OS Command Injection vulnerability in H3C Gr2200 Firmware Minigr1A0V100R014
H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
local
low complexity
h3c CWE-78
7.8
2022-08-25 CVE-2022-37074 Out-of-bounds Write vulnerability in H3C Gr-1200W Firmware
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set.
local
low complexity
h3c CWE-787
7.8
2022-05-04 CVE-2022-28940 Unspecified vulnerability in H3C Magic R100 Firmware V100R005
In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization.
network
low complexity
h3c
7.5