CVE-2025-10942

Name of the Vulnerable Software and Affected Versions H3C Magic B3 versions up to 100R002

Description A flaw exists in H3C Magic B3 that allows for remote buffer overflow. The issue is related to the AddMacList function within the /goform/aspForm file. Manipulation of the param argument can trigger the overflow. The exploit is publicly available.

Recommendations Versions up to 100R002 should be updated to a newer, secure version when available. As a temporary workaround, consider restricting access to the /goform/aspForm file. Avoid using the param argument in the AddMacList function until the issue is resolved.