PT-2022-22238
CVE-2022-34607
·
Published
2022-07-20
·
Updated
2022-07-26
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
H3C Magic R200 version R200V200R004L02
Description
A stack overflow issue was discovered via the
HOST parameter at the "/doping.asp" API endpoint.Recommendations
For H3C Magic R200 version R200V200R004L02, as a temporary workaround, consider restricting access to the "/doping.asp" API endpoint to minimize the risk of exploitation. Avoid using the
HOST parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾