h3c Magic NX15 Firmware vulnerabilities

2 CVEs affecting h3c Magic NX15 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-57295, published 2025-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-3546, published 2025-04-14. High severity, CVSS 8.0. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the…
CVE-2025-57295, published 2025-09-18. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses…