Stack Overflow Vulnerability in H3C Magic R100 Device
CVE-2023-27801

4.9MEDIUM

Key Information:

Vendor: H3c
Status: Magic R100 Firmware
Vendor: CVE Published:; 7 April 2023

What is CVE-2023-27801?

A stack overflow vulnerability has been identified in the H3C Magic R100 device, specifically through the DelDNSHnList interface located at /goform/aspForm. An attacker can exploit this vulnerability by sending a specially crafted payload, which may result in a Denial of Service (DoS) condition, disrupting the normal operation of the device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://hackmd.io/%400dayResearch/DelDNSHnList

CVSS V3.1

Score:

4.9

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 7, 2023
Vulnerability Reserved
Mar 5, 2023

JSON

H3c

What is CVE-2023-27801?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.