Magic Nx15 Firmware vulnerabilities
2 known vulnerabilities in Magic Nx15 Firmware from H3C. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest first
- 8.0 High severity
Magic Nx15 Firmware: Weak Password Requirements
H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses the default password "admin," both stored in the /etc/shadow f
- 8.0 High severity
Magic NX15: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard