CVE-2025-60262Disclosure(h3c / magic_ba1500l)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote attackers could gain root-level control over the devices.

h3c CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-276

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

magic_ba1500l
magic_ba1500l_firmware
mc102-g
mc102-g_firmware

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

h3c

Products

magic_ba1500lmagic_ba1500l_firmwaremc102-gmc102-g_firmware

3 versions affected across 4 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://securityonline.info/cve-2025-60262-critical-misconfiguration-in-h3c-wireless-gear-hands-control-to-hackers/?utm_source=dlvr.it&utm_medium=twitter

Full discourse1 post

Komodo Cyber Security@Komodosec238d
Disclosure
#VulnerabilityReport #CriticalVulnerability CVE-2025-60262: Critical Misconfiguration in H3C Wireless Gear Hands Control to Hackers https://securityonline.info/cve-2025-60262-critical-misconfiguration-in-h3c-wireless-gear-hands-control-to-hackers/?utm_source=dlvr.it&utm_medium=twitter
Post summary
The tweet announces a critical misconfiguration vulnerability (CVE-2025-60262) in H3C Wireless gear and links to an external report, but provides no PoC, exploit, or patch details.
0000051
1.5K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	h3c	magic_ba1500l	-	-	-
OS	h3c	magic_ba1500l_firmware	swba1a0v100r006	-	-
HW	h3c	mc102-g	-	-	-
OS	h3c	mc102-g_firmware	hm1a0v200r010	-	-

Explore more

Back to dashboard h3c CVEs magic_ba1500l vulnerabilities