h
h3c
Security Risk Profile
64
/100
highSecurity Risk Score
Comprehensive risk assessment based on 236 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 28, 2014 to present
236
Total CVEs
203
Critical+High
0
Exploited
203
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
203
Critical/High
Risk Level
64/100
high
📈 9 in Last 30 Days
Severity Distribution
Critical
89High
114Medium
32Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
40Age Distribution
Common Weaknesses (CWE)
1
Command Injection
29
2
Buffer Overflow
23
3
Path Traversal
6
4
OS Command Injection
5
5
SQL Injection
3
Most Affected Products
1. H3C Magic R200 Firmware38
2. H3C Magic R100 Firmware38
3. H3C Magic R300-2100m Firmware34
4. H3C Gr-1200w Firmware26
5. H3C Magic Nx18 Plus Firmware22
Recent Vulnerabilities
See more →CVE-2026-18902
CVSS 7.3high
H3C NX15 esps repeaterproc command injection
Aug 5, 2026🔧 No Patch
CVE-2026-18901
CVSS 7.3high
H3C NX15 Web API esps service.add routine
Aug 5, 2026🔧 No Patch
CVE-2026-18900
CVSS 7.3high
H3C NX15 Backend RPC esps file.exec os command injection
Aug 5, 2026🔧 No Patch
CVE-2026-18814
CVSS 7.3high
H3C NX15 esps reload.reload_config command injection
Aug 4, 2026🔧 No Patch
CVE-2026-18813
CVSS 7.3high
H3C NX15 esps delete command injection
Aug 4, 2026🔧 No Patch
CVE-2026-18812
CVSS 7.3high
H3C NX15 esps esps.ipv6.wan command injection
Aug 4, 2026🔧 No Patch
CVE-2026-18811
CVSS 7.3high
H3C NX15 esps add command injection
Aug 4, 2026🔧 No Patch
CVE-2026-18810
CVSS 6.9medium
H3C NX15 networkSetup missing authentication
Aug 4, 2026🔧 No Patch
CVE-2025-29296
CVSS 9.8critical
Aug 4, 2026🔧 No Patch
CVE-2026-15907
CVSS 5.5medium
H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injection
Jul 15, 2026🔧 No Patch
Monitor h3c in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.