CVE-2022-30919

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm

published June 8, 2022

CVSS
—
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow is hiding in the Edit_BasicSSID_5G parameter of H3C Magic R100! Think of it like a well-organized filing cabinet where one overly stuffed drawer causes the entire thing to jam. When you push too hard, it spills out everywhere, potentially giving someone access to sensitive files. If exploited, this stack overflow could lead to unpredictable behavior or system crashes, making your network feel like it's on a rollercoaster ride! While there's no current evidence of exploitation, the vulnerability still poses a risk that shouldn't be ignored.

Put simply

Think of it like a well-organized filing cabinet where one overly stuffed drawer causes the entire thing to jam. When you push too hard, it spills out everywhere, potentially giving someone access to sensitive files. This vulnerability occurs in the H3C Magic R100 where the Edit_BasicSSID_5G parameter can result in a stack overflow, allowing potential attackers to execute arbitrary code or crash the device.

What to do

If exploited, this stack overflow could lead to unpredictable behavior or system crashes, making your network feel like it's on a rollercoaster ride! While there's no current evidence of exploitation, the vulnerability still poses a risk that shouldn't be ignored. To protect yourself, ensure your firmware is updated to the latest version. Regularly audit your device configurations and monitor for unusual activity that may indicate a breach. Don't forget to follow up on H3C's official channels for any patches related to this issue. You've got this! Stay proactive and keep your network secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01665 · 76.5th percentile
Published
2022-06-08T13:23Z
EPSS history
Timeline
  • 08 JUN 13:23Z
    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm
    cvelistv5