PT-2022-22237 · H3C · H3C Magic R200
CVE-2022-34606
·
Published
2022-07-20
·
Updated
2022-07-26
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
H3C Magic R200 version R200V200R004L02
Description
A stack overflow issue was discovered via the
EditvsList parameter at the "/dotrace.asp" API endpoint.Recommendations
For version R200V200R004L02, consider restricting access to the "/dotrace.asp" API endpoint to minimize the risk of exploitation. Avoid using the
EditvsList parameter in this endpoint until the issue is resolved.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
H3C Magic R200