← Database

CVE-2025-2728

HIGH CVSS: 8.0 Published: 2025-03-25 Modified: 2026-06-17

Description

A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vulnerability affects unknown code of the file /api/wizard/getNetworkConf. The manipulation leads to command injection. The attack needs to be approached within the local network. It is recommended to upgrade the affected component.

Affected Platforms

Unknown

Weakness Type

CWE-74, CWE-77

References