References https://nvd.nist.gov/vuln/detail/CVE-2022-34598 https://cve.imfht.com/detail/CVE-2022-34598 https://access.redhat.com/security/cve/cve-2022-34598 https://avd.aquasec.com/nvd/2022/cve-2022-34598/ https://www.tenable.com/cve/CVE-2022-34598 https://www.redpacketsecurity.com/h3c-magic-r100-command-execution-cve-2022-34598/ https://www.cve.org/CVERecord?id=CVE-2022-34598 https://security.zone.ci/aliyun/ali_nvd/57048.html
Related VulnerabilitiesPoCCVE-2025-15403: RegistrationMagic <= 6.0.7.1 - Privilege EscalationPoCCVE-2026-42281: MagicMirror <= 2.35.0 - Server-Side Request ForgeryMagicMirror² /cors 服务器端请求伪造漏洞(CVE-2026-42281)PoCCVE-2021-4073: RegistrationMagic <= 5.0.1.7 - Authentication BypassPoCH3C Magic NX系列设备存在远程命令执行漏洞(CVE-2025-2725)MagicINFO SWUpdateFileUploader 文件上传漏洞三星MagicINFO CVE-2025-4632 文件上传PoCCVE-2010-1307: Joomla! Component Magic Updater - Local File InclusionPoCCVE-2021-24862: WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL InjectionPoCCVE-2021-25864: Hue Magic 3.0.0 - Local File InclusionPoCCVE-2023-33629: H3C Magic R300-2100M - Remote Code ExecutionPoCCVE-2023-34598: Gibbon v25.0.0 - Local File Inclusion