Magic Ba1500l Firmware
1 CVEs
product
Monthly
H3C wireless controllers (M102G) and access points (BA1500L) have a vsftpd misconfiguration that grants root ownership to anonymously uploaded FTP files. Attackers can upload malicious files that execute with root privileges, gaining full device control.
Privilege Escalation
Mc102 G Firmware
Magic Ba1500l Firmware
NVD
CVSS 3.1
9.8
EPSS
0.2%
CVE-2025-60262
EPSS 0%
CVSS 9.8
CRITICAL
POC
Act Now
H3C wireless controllers (M102G) and access points (BA1500L) have a vsftpd misconfiguration that grants root ownership to anonymously uploaded FTP files. Attackers can upload malicious files that execute with root privileges, gaining full device control.
Privilege Escalation
Mc102 G Firmware
Magic Ba1500l Firmware
NVD