Stack Overflow Vulnerability in H3C Magic R100 Router
CVE-2022-30923

9.8CRITICAL

Key Information:

Vendor

H3c
Status
Magic R100 Firmware
Vendor
CVE Published:
8 June 2022

What is CVE-2022-30923?

The H3C Magic R100 router exhibits a stack overflow vulnerability that can be exploited through the Asp_SetTimingtimeWifiAndLed parameter in the /goform/aspForm endpoint. This flaw allows potential attackers to cause service disruption or execute arbitrary code, compromising the integrity and availability of affected devices. It highlights the critical need for robust network security measures to protect against such vulnerabilities, especially in Internet of Things (IoT) deployments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR10...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.