Remote Denial of Service Vulnerability in H3C Magic R200G Router
CVE-2025-4998

7.1HIGH

Key Information:

Vendor

H3c
Status
Magic R200g
Vendor
CVE Published:
20 May 2025

What is CVE-2025-4998?

A vulnerability exists in the H3C Magic R200G router, specifically in its HTTP POST Request Handler. This issue can be exploited through the manipulation of specific arguments in functions related to SSID setup and MAC list editing. Attackers can leverage this flaw to cause a denial of service, potentially disrupting network connectivity. The vulnerability is exploitable remotely, and despite early disclosure to the vendor, no response has been received.

Affected Version(s)

Magic R200G 100R002

References

https://vuldb.com/?id.309649
vdb-entrytechnical-description
https://vuldb.com/?ctiid.309649
signaturepermissions-required
https://vuldb.com/?submit.563583
third-party-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

CH13hh (VulDB User)
.
CVE-2025-4998 : Remote Denial of Service Vulnerability in H3C Magic R200G Router