CVE-2025-14196

Name of the Vulnerable Software and Affected Versions H3C Magic B1 versions up to 100R004

Description A flaw exists in H3C Magic B1 up to version 100R004. The issue involves a buffer overflow in the sub 44de0 function within the /goform/aspForm file. Manipulation of the param argument can trigger this overflow, potentially allowing for remote exploitation. The exploit for this issue has been publicly released. The vendor was notified but did not respond.

Recommendations Versions prior to 100R005 should be updated.