CVE Feed

    Dashboard / CVE / CVE-2025-14015

    CVE-2025-14015

    A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

    Published:Dec 4, 2025
    Last Modified:Dec 23, 2025
    EPS:Dec 4, 2025
    EPSS Score:0.00046
    CVSS Score:8.8

    Affected Products

    Vendor
    H3c
    Product
    Magic
    Vendor
    H3c
    Product
    Magic B0
    Vendor
    H3c
    Product
    Magic B0 Firmware

    Exploits

    https://github.com/HungryGoogle/log_attack/blob/main/index2/2.mdhttps://github.com/HungryGoogle/log_attack/blob/main/index2/2.md

    Related CVEs

    CVE-2025-61330 (CVSS 6.5) — A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network…
    CVE-2025-10942 (CVSS 7.4) — A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList…
    CVE-2025-57578 (CVSS 8) — An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default p…
    CVE-2023-30311 (CVSS 7.5) — An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which…
    CVE-2023-34933 (CVSS 7.5) — A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial …
    CVE-2023-34934 (CVSS 7.5) — A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denia…
    CVE-2023-34928 (CVSS 7.5) — A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial o…
    CVE-2023-34936 (CVSS 7.5) — A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial o…
    CVE-2023-34937 (CVSS 7.5) — A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Se…
    CVE-2023-34935 (CVSS 7.5) — A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial o…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High