Hard-Coded Weak Password Vulnerability in H3C Magic Devices
CVE-2025-61330

6.5MEDIUM

Key Information:

Vendor

H3C
Status
Magic-branded devices
Vendor
CVE Published:
16 October 2025

What is CVE-2025-61330?

A vulnerability has been identified in all H3C Magic-branded devices, wherein a hard-coded weak password is used for the root account, potentially leaving them susceptible to unauthorized access. Many of these devices ship with the Telnet service enabled by default or allow users to activate it through various management interfaces. Furthermore, the presence of Virtual Servers can expose these devices to the public network. This configuration can enable attackers to leverage the weak credentials to gain root privileges, facilitating remote control and various malicious activities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.notion.so/25e8cd7f7805800a9a71c1193fb3cb43

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.