CVE-2022-28940: h3c Magic r100 Firmware

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack.

Affected products

• h3c Magic r100 Firmware: up to and including v100r005

Published 2022-05-04. Last modified 2026-06-17.