Remote Command Execution Vulnerabilities in H3C Routers

CVE-2025-44635

What is CVE-2025-44635?

The vulnerability presents multiple unauthorized remote command execution risks in various H3C router series, enabling attackers to bypass authentication protocols. By injecting specially crafted text into request URLs or message headers, malicious actors can execute arbitrary commands. This exploitation allows for obtaining ROOT privileges over remote devices, facilitating complete control and compromising device integrity. It impacts a wide range of H3C router models, underscoring the importance of ensuring prompt updates to mitigate these risks.

References