CVE-2025-29296: Command Injection
H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 contain multiple command injection vulnerabilities in the /api/esps request handler. The affected object interfaces and methods are esps.dhcpd.vlan (getlist, delete), esps.filter.url (add, modify), esps.apcm.version (delete, H3C Magic NX15 only), esps.swcm.version (delete, upgrade, all affected models except H3C Magic NX15), and esps.system.ntp (set, all affected models except H3C Magic NX15). Attacker-controlled request parameters are incorporated into shell expressions executed by eval without adequate validation, allowing a remote attacker to execute arbitrary commands as root and gain complete control of the affected device.
Affected Software
Event History
Frequently Asked Questions
What are the affected devices related to CVE-2025-29296?
The affected devices include H3C Magic BE18000, H3C NX400, H3C Magic NX30 Pro, H3C Magic R3010, H3C Magic NX15, H3C Magic R1510, and H3C NE36 Pro.
What is the severity of CVE-2025-29296?
The severity of CVE-2025-29296 is rated as high with a risk score of 93.
How do I fix CVE-2025-29296?
To fix CVE-2025-29296, users should update their affected H3C devices to the latest firmware version provided by H3C.
What type of vulnerability is CVE-2025-29296?
CVE-2025-29296 is classified as a command injection vulnerability.
What could be the impact of CVE-2025-29296 on my network devices?
Exploitation of CVE-2025-29296 may allow an attacker to execute arbitrary commands on the affected H3C network devices.