CVE-2026-3701
H3C · Magic B1 Router
A security vulnerability in the H3C Magic B1 router up to version 100R004 could allow for unauthorized device access or control.
Executive summary
H3C Magic B1 routers are affected by a high-severity vulnerability that could allow attackers to compromise the device and the network it serves.
Vulnerability
While the specific vulnerability type is not detailed, it affects the Magic B1 router firmware. The CVSS score of 8.8 suggests a significant flaw, likely involving remote access or administrative bypass.
Business impact
A compromise of a perimeter router like the Magic B1 allows attackers to monitor network traffic, perform man-in-the-middle attacks, or launch further attacks against internal network assets. The CVSS score of 8.8 reflects the high severity of a router-level compromise.
Remediation
Immediate Action: Update the H3C Magic B1 firmware to a version newer than 100R004 immediately.
Proactive Monitoring: Monitor for unusual administrative logins to the router and check for unauthorized changes to DNS or routing settings.
Compensating Controls: Disable remote management features on the WAN interface and restrict local management access to specific trusted IP addresses.
Exploitation status
Public Exploit Available: false
Analyst recommendation
Immediate firmware updates are critical for all affected H3C Magic B1 routers. Network administrators should treat this as a high-priority task to ensure the security of the network perimeter.