Buffer Overflow Vulnerability in H3C GR-5400AX Router

CVE-2025-4446

What is CVE-2025-4446?

A buffer overflow vulnerability has been identified in the H3C GR-5400AX router models up to version 100R008. This issue resides within the Edit_List_SSID function of the /goform/aspForm file, where improper handling of the 'param' argument can lead to overflow conditions. Attackers with access to the local network could exploit this vulnerability, potentially allowing them to execute arbitrary code or manipulate affected router functionalities. Users are advised to review network security protocols and ensure their devices are updated to prevent exploitation.

References