How many CVEs does H3C have?

H3C has 223 published CVE records since 2014, including 56 in the last two years.

How many H3C CVEs are in CISA KEV?

None of H3C's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which H3C products have the most CVEs?

The H3C products with the most published CVEs are magic r100 firmware, magic r200 firmware, gr-1200w firmware, magic nx18 plus firmware, magic nx18 plus.

What are the most common weakness types in H3C CVEs?

H3C's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

Are there public exploits for H3C vulnerabilities?

Yes — 117 of H3C's CVEs have a known public exploit.

How many critical H3C vulnerabilities are there?

H3C has 82 critical and 105 high-severity CVEs.

What is the average severity of H3C CVEs?

The average CVSS base score across H3C's scored CVEs is 8.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

223 CVEs

H3C Vulnerabilities

Name: H3C vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for H3C.

223

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

117

Public exploits

PoC or exploit code

8.2

Avg CVSS

2014–2026

Overview

H3C has 223 published CVE records since 2014, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 117 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting H3C products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on H3C's vulnerability posture, as a share of its 223 published CVEs.

Average CVSS: 8.2
Critical / high: 84%
Actively exploited (KEV): 0%
Public exploit available: 52%
Patch available: 8%

Severity and exploitation

How the CVSS severity of H3C's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical82

High105

Medium36

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of H3C's CVEs are currently listed in CISA's KEV catalog.

Public exploits

117

117 of H3C's CVEs have a known public exploit available.

Most affected products

The H3C products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in H3C CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish H3C CVE records.

Disclosure activity by year

How many H3C CVEs were published each year.

2014

1

2019

1

2022

100

2023

55

2024

10

2025

45

2026

11

Latest H3C CVEs

The most recently disclosed vulnerabilities affecting H3C.

H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injection
CWE-89
Medium · CVSS 6.9
EPSS 0.3%2026-07-15
H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery
CWE-640
Medium · CVSS 6.9
EPSS 0.3%2026-07-12
H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow
CWE-119
High · CVSS 8.7
EPSS 0.5%2026-06-01
H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow
CWE-119
High · CVSS 8.7
EPSS 0.4%2026-05-24
H3C Magic B3 aspForm UpdateWanParams buffer overflow
CWE-119
High · CVSS 8.6
EPSS 0.5%2026-05-17
H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow
CWE-120
High · CVSS 8.7
EPSS 0.4%2026-04-19
H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow
CWE-120
High · CVSS 8.7
EPSS 0.5%2026-04-19
H3C Magic B0 aspForm Edit_BasicSSID buffer overflow
CWE-120
High · CVSS 8.7
EPSS 0.5%2026-04-19
H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection
CWE-77
Medium · CVSS 6.9
EPSS 40.8%2026-03-11
H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflow
CWE-120
High · CVSS 8.7
EPSS 0.7%2026-03-08
Critical vulnerability · 2026-01-06
CWE-276
Critical · CVSS 9.8
EPSS 0.5%2026-01-06
H3C Magic B1 aspForm sub_44de0 buffer overflow
CWE-119
High · CVSS 8.7
EPSS 0.5%2025-12-07

Track new H3C CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor H3C CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Bentley Systems227 CVEs Delta Electronics226 CVEs project224 CVEs OpenEMR224 CVEs WWBN224 CVEs glpi-project223 CVEs Trendnet221 CVEs RealNetworks219 CVEs

Browse all vendors

Frequently asked questions

Common questions about H3C vulnerabilities.

How many CVEs does H3C have?: H3C has 223 published CVE records since 2014, including 56 in the last two years.
How many H3C CVEs are in CISA KEV?: None of H3C's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which H3C products have the most CVEs?: The H3C products with the most published CVEs are magic r100 firmware, magic r200 firmware, gr-1200w firmware, magic nx18 plus firmware, magic nx18 plus.
What are the most common weakness types in H3C CVEs?: H3C's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
Are there public exploits for H3C vulnerabilities?: Yes — 117 of H3C's CVEs have a known public exploit.
How many critical H3C vulnerabilities are there?: H3C has 82 critical and 105 high-severity CVEs.
What is the average severity of H3C CVEs?: The average CVSS base score across H3C's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track H3C vulnerabilities

Monitor new H3C vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing