Remote Command Execution Vulnerability in H3C Routers and Access Points

CVE-2025-63258

What is CVE-2025-63258?

A remote command execution vulnerability allows attackers to exploit various H3C ERG3 and ERG5 series routers, as well as XiaoBei routers and wireless access points. This security flaw can be exploited by injecting crafted commands into the sessionid parameter, potentially leading to unauthorized access and full control over affected devices. Users are encouraged to apply patches and update their systems to mitigate risks.

References