CVE-2022-30917

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm

published June 8, 2022

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow can happen with just a misconfigured parameter! The H3C Magic R100's AddWlanMacList is a little too trusting, and that's where the trouble begins. 🔍 Think of this like a restaurant kitchen where the chef keeps accepting orders without checking the recipe for limits. If the orders keep flowing, eventually the kitchen can overflow with too many ingredients and chaos ensues! If exploited, this could lead to unexpected behavior, system crashes, or even a complete denial of service. An attacker could potentially cause the device to misbehave, affecting all connected users. So, while it's not currently known to be exploited, the potential for disruption is definitely there!

Put simply

Think of this like a restaurant kitchen where the chef keeps accepting orders without checking the recipe for limits. If the orders keep flowing, eventually the kitchen can overflow with too many ingredients and chaos ensues! This stack overflow vulnerability occurs through the AddWlanMacList parameter in the H3C Magic R100, where excessive input can lead to stack corruption, jeopardizing system stability.

What to do

If exploited, this could lead to unexpected behavior, system crashes, or even a complete denial of service. An attacker could potentially cause the device to misbehave, affecting all connected users. So, while it's not currently known to be exploited, the potential for disruption is definitely there! To protect against this, apply input validation to limit the number of MAC addresses that can be added. Keeping the firmware updated and monitoring for unusual behaviors will help as well. You've got this! Stay vigilant and take control of your device’s security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01665 · 76.6th percentile
Published
2022-06-08T13:23Z
EPSS history
Timeline
  • 08 JUN 13:23Z
    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm
    cvelistv5