Buffer Overflow Vulnerability in H3C N12 Product
CVE-2024-57479
9.8CRITICAL
Summary
The H3C N12 V100R005 product is susceptible to a buffer overflow vulnerability resulting from inadequate length verification within its MAC address update function. Attackers can exploit this flaw to launch remote attacks by sending specially crafted POST requests to the /bin/webs endpoint, potentially causing device crashes or executing arbitrary commands. Users of the affected product should take immediate action to secure their systems against this type of vulnerability.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published