Stack Overflow Vulnerability in H3C GR-1200W MiniGRW1A0V100R006
CVE-2022-37068

9.8CRITICAL

Key Information:

Vendor

H3c
Status
Gr-1200w Firmware
Vendor
CVE Published:
25 August 2022

What is CVE-2022-37068?

A stack overflow vulnerability has been identified in the H3C GR-1200W MiniGRW1A0V100R006. This flaw arises within the 'UpdateMacCloneFinal' function, which may allow an attacker to exploit memory management errors. By sending maliciously crafted input, the vulnerability can be triggered, potentially leading to unauthorized access or disruption of service. Users of this device are advised to implement recommended patches and monitor system integrity closely.

References

https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.