ZeroDay Findings
Sign inSign up

Findings

CVE-2025-14196

A weakness has been identified in H3C Magic B1 up to 100R004.

Published Dec 7, 2025 · updated Oct 14, 2026

A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub_44de0 of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 7, 2025 · NIST NVD

    Detected

    A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub_44de0 of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in a

  2. Oct 14, 2026 · NIST NVD

    Updated

    A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub_44de0 of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in a

Sources

  • CVE.orgCVE-2025-14196

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-14196

    30-day exploitation probability 0.5%

    first.org
  • NIST NVDCVE-2025-14196

    A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub_44de0 of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made avail

    nvd.nist.gov

References