PT-2025-49409 · H3C · H3C Magic B1St

Qmssdxn · Published 2025-12-07 · Updated 2025-12-08 · CVE-2025-14196

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions H3C Magic B1 versions up to 100R004

Description A flaw exists in H3C Magic B1 up to version 100R004. The issue involves a buffer overflow in the sub 44de0 function within the /goform/aspForm file. Manipulation of the param argument can trigger this overflow, potentially allowing for remote exploitation. The exploit for this issue has been publicly released. The vendor was notified but did not respond.

Recommendations Versions prior to 100R005 should be updated.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2025-14196

Affected Products

H3C Magic B1St

References · 11

• 🔥 https://github.com/lin-3-start/lin-cve/blob/main/H3C%20Magic%20B1/H3C%20Magic%20B1.md#poc · Exploit
• 🔥 https://github.com/lin-3-start/lin-cve/blob/main/H3C%20Magic%20B1/H3C%20Magic%20B1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14196 · Security Note
• https://twitter.com/CveFindCom/status/1997707495419040032 · Twitter Post
• https://vuldb.com/?id.334616 · Note
• https://t.me/cveNotify/145035 · Telegram Post
• https://vuldb.com/?ctiid.334616 · Note
• https://t.me/CVEtracker/39048 · Telegram Post
• https://twitter.com/offseq/status/1997864438628597990 · Twitter Post
• https://twitter.com/CVEnew/status/1997692826616791493 · Twitter Post
• https://vuldb.com/?submit.699387 · Note