PT-2022-22233 · H3C · H3C Magic R200
CVE-2022-34602
·
Published
2022-07-20
·
Updated
2022-07-26
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
H3C Magic R200 version R200V200R004L02
Description
A stack overflow issue was discovered via the ipqos lanip editlist interface at the "/goform/aspForm" API endpoint.
Recommendations
For version R200V200R004L02, consider restricting access to the "/goform/aspForm" API endpoint until a patch is available. As a temporary workaround, avoid using the ipqos lanip editlist interface to minimize the risk of exploitation.
Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
H3C Magic R200