Stack Overflow Vulnerability in H3C Magic R300 Router
CVE-2023-33640

7.2HIGH

Key Information:

Vendor

H3c
Status
Magic R300-2100m Firmware
Vendor
CVE Published:
31 May 2023

What is CVE-2023-33640?

The H3C Magic R300 router, specifically version R300-2100MV100R004, has been identified with a stack overflow vulnerability. This issue can be exploited through the SetAPWifiorLedInfoById interface found in the /goform/aspForm endpoint, potentially allowing attackers to execute arbitrary code and disrupt network services. Network administrators are urged to apply necessary patches and enhance security measures to safeguard their infrastructure from unauthorized access and potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://hackmd.io/%400dayResearch/S1twOtyrh

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.