References https://avd.aliyun.com/detail?id=AVD-2023-29917 https://www.gdust.edu.cn/jszx/wlaq1/xxtb/index.aspx?id=197 https://www.cnvd.org.cn/flaw/show/CNVD-2023-41128 https://www.imeic.cn/xxzx/info/1150/1079.htm https://avd.aliyun.com/detail?id=AVD-2023-29911 https://app.opencve.io/cve/?page=4&vendor=h3c https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2022-2710.html/ https://www.cvedetails.com/cve/CVE-2023-29911/ https://dbugs.ptsecurity.com/vulnerability/PT-2023-22473 https://nvd.nist.gov/vuln/detail/CVE-2023-29916 https://github.com/advisories/GHSA-48vq-4c6v-h28h https://www.tenable.com/cve/CVE-2023-29913 https://www.cve.org/CVERecord?id=CVE-2023-29912 https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1683.html/ https://access.redhat.com/security/cve/cve-2022-34607 https://cvefeed.io/vuln/detail/CVE-2022-34602 https://vuldb.com/vuln/204663 https://echelongraph.io/pulse/CVE-2023-29910/blast-radius https://www.cve.org/CVERecord?id=CVE-2023-29914
Related VulnerabilitiesPoCCVE-2025-15403: RegistrationMagic <= 6.0.7.1 - Privilege EscalationPoCCVE-2026-42281: MagicMirror <= 2.35.0 - Server-Side Request ForgeryMagicMirror² /cors 服务器端请求伪造漏洞(CVE-2026-42281)PoCCVE-2021-4073: RegistrationMagic <= 5.0.1.7 - Authentication BypassPoCH3C Magic NX系列设备存在远程命令执行漏洞(CVE-2025-2725)MagicINFO SWUpdateFileUploader 文件上传漏洞三星MagicINFO CVE-2025-4632 文件上传PoCCVE-2010-1307: Joomla! Component Magic Updater - Local File InclusionPoCCVE-2021-24862: WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL InjectionPoCCVE-2021-25864: Hue Magic 3.0.0 - Local File InclusionPoCCVE-2023-33629: H3C Magic R300-2100M - Remote Code ExecutionPoCCVE-2024-7399: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution