CVE-2025-2725: H3C Magic BE18000 HTTP POST Request auth command injection
A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this vulnerability is an unknown functionality of the file /api/login/auth of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
H3C Magicto a version that resolves this vulnerability.Fixed in V100R014 - Compensating control
Restrict access to the vulnerable /api/login/auth HTTP POST functionality so the attack cannot be initiated within the local network (e.g., limit/localize who can reach it via network controls such as ACL/firewall rules).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2725?
CVE-2025-2725 is classified as a critical vulnerability.
How do I fix CVE-2025-2725?
To fix CVE-2025-2725, it is recommended to update the affected H3C products to versions later than V100R014.
What products are affected by CVE-2025-2725?
The affected products include H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010, and Magic BE18000 up to V100R014.
What component is impacted by CVE-2025-2725?
CVE-2025-2725 impacts the HTTP POST Request Handler functionality of the file /api/login/auth.
What type of vulnerability is CVE-2025-2725?
CVE-2025-2725 is a web application vulnerability related to improper handling of HTTP requests.