Stack Overflow Vulnerability in H3C Magic R300 Network Device
CVE-2023-33629

7.2HIGH

Key Information:

Vendor
H3c
Status
Magic R300-2100m Firmware
Vendor
CVE Published:
31 May 2023

Summary

A stack overflow vulnerability has been identified in the H3C Magic R300 network device, specifically affecting version R300-2100MV100R004 through the DeltriggerList interface at /goform/aspForm. This issue could allow remote attackers to execute arbitrary code, leading to potential unauthorized access and control over the affected system. Mitigating this vulnerability is crucial for maintaining the integrity and availability of network services.

References

https://hackmd.io/%400dayResearch/r1UjggZfh

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.