Stack Overflow in H3C H200 Impacts IPv6 Functionality
CVE-2022-37096

9.8CRITICAL

Key Information:

Vendor

H3c
Status
H200 Firmware
Vendor
CVE Published:
25 August 2022

What is CVE-2022-37096?

The H3C H200 device has been identified to contain a stack overflow vulnerability in the EnableIpv6 function. This flaw can potentially allow attackers to exploit the stack overflow and lead to unintended behavior, affecting the device's IPv6 functionality. Users of the H200 model should be aware of this issue and take appropriate measures to mitigate any security risks.

References

https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/11
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.