PT-2022-23418 · H3C · H3C Magic Nx18 Plus
CVE-2022-36496
·
Published
2022-08-25
·
Updated
2022-08-27
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
H3C Magic NX18 Plus version NX18PV100R003
Description
A stack overflow issue was discovered via the function
SetMobileAPInfoById(). This issue affects the H3C Magic NX18 Plus device.Recommendations
For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the
SetMobileAPInfoById() function as a temporary workaround until a patch is available.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
H3C Magic Nx18 Plus