CVE-2026-3701Disclosure(h3c / magic_b1)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • magic_b1
  • magic_b1_firmware

Threat summary

  • 6 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 6 signals
  • Disclosure: 4 classified signals
  • General: 1 classified signal
  • Disclov: 1 classified signal
  • Peaked 2d ago at 4 mentions (2026-03-08); latest day: 1
  • 6 total mentions across 3 days

Affected systems

Vendors
Products
magic_b1magic_b1_firmware

1 version affected across 2 products

Deep dive

Activity timeline6 mentions / 3d
01234Mentions · 2026-03-08: 4Mentions · 2026-03-12: 1Mentions · 2026-03-13: 1Technical Details · 2026-03-08: 4Technical Details · 2026-03-12: 1Technical Details · 2026-03-13: 103-0803-1203-13
Signal classification3 categories
Disclosure
466.7%
General
116.7%
Disclov
116.7%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-03-084
Disclosure4
2026-03-121
General1
2026-03-131
Disclov1
Full discourse6 posts
  • RedPacket Security@RedPacketSec
    Disclosure

    CVE Alert: CVE-2026-3701 - H3C - Magic B1 - https://www.redpacketsecurity.com/cve-alert-cve-2026-3701-h3c-magic-b1/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3701 #h3c #magic-b1

    Post summary

    A CVE alert for CVE‑2026‑3701 targeting H3C Magic B1 is posted, providing basic details but no evidence of exploit code or active attacks.

    00010108
    3.5K followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-3701: HIGH] Critical security vulnerability detected in H3C Magic B1 up to 100R004 allows remote execution due to buffer overflow in Edit_BasicSSID_5G function. Vendor unresponsive to disclosure.#cve,CVE-2026-3701,#cybersecurity https://cvefind.com/CVE-2026-3701

    Post summary

    The post announces a high‑severity buffer overflow in H3C Magic B1 firmware that enables remote execution; no exploits, patches, or active attacks are discussed.

    0001078
    600 followersView on X
  • CRAC Learning - Tech@cracbot
    Disclov

    CVE-2026-3701 (CVSS:7.4, HIGH) is Analyzed. A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function..https://nvd.nist.gov/vuln/detail/CVE-2026-3701 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The tweet announces the detection of CVE‑2026‑3701 in H3C Magic B1, noting its high CVSS score, but provides no PoC, exploit, patch, or detailed technical description beyond a function reference.

    0000016
    172 followersView on X
  • CRAC Learning - Tech@cracbot
    General

    CVE-2026-3701 (CVSS:7.4, HIGH) is Analyzed. A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function..https://nvd.nist.gov/vuln/detail/CVE-2026-3701 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces CVE-2026-3701, providing basic technical details such as CVSS score and targeted product, but offers no evidence of exploitation, patches, or PoC.

    0000020
    172 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-3701 A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. … https://www.cve.org/CVERecord?id=CVE-2026-3701

    Post summary

    The text announces that CVE-2026-3701 has been detected in H3C Magic B1 devices, specifying that the Edit_BasicSSID_5G function in the /goform/aspForm file is affected, with details available via the CVE database link.

    00000128
    56.6K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-3701 - High A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. Such manipulation of the... https://www.thehackerwire.com/vulnerability/CVE-2026-3701/ https://t.co/MzWLBDG1Mw

    Post summary

    A new high‑severity vulnerability (CVE‑2026‑3701) in H3C Magic B1 routers has been identified, affecting the Edit_BasicSSID_5G function, but no proof‑of‑concept, exploit, or patch details are provided.

    0000032
    130 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWh3cmagic_b1---
OSh3cmagic_b1_firmware---

Explore more