CVE Feed

    Dashboard / CVE / CVE-2025-10942

    CVE-2025-10942

    A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

    Published:Sep 25, 2025
    Last Modified:Apr 15, 2026
    EPS:Sep 25, 2025
    EPSS Score:0.0045
    CVSS Score:8.8

    Affected Products

    Vendor
    H3c
    Product
    Magic

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-14015 (CVSS 7.4) — A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the…
    CVE-2025-61330 (CVSS 6.5) — A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network…
    CVE-2025-57578 (CVSS 8) — An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default p…
    CVE-2023-30311 (CVSS 7.5) — An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which…
    CVE-2023-34933 (CVSS 7.5) — A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial …
    CVE-2023-34934 (CVSS 7.5) — A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denia…
    CVE-2023-34928 (CVSS 7.5) — A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial o…
    CVE-2023-34936 (CVSS 7.5) — A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial o…
    CVE-2023-34937 (CVSS 7.5) — A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Se…
    CVE-2023-34935 (CVSS 7.5) — A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial o…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High