PT-2023-21353 · H3C · H3C Magic R100
CVE-2023-27803
·
Publicado
2023-04-07
·
Atualizado
2023-04-13
CVSS v3.1
4.9
Média
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
H3C Magic R100 version R100V100R005.bin
Description
A stack overflow issue was discovered via the EdittriggerList interface at the "/goform/aspForm" API endpoint. This allows attackers to cause a Denial of Service (DoS) via a crafted payload.
Recommendations
For H3C Magic R100 version R100V100R005.bin, consider disabling access to the "/goform/aspForm" API endpoint until a patch is available to prevent exploitation of the stack overflow issue.
Exploit
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
H3C Magic R100