CVE-2022-30921

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm

published June 8, 2022

CVSS
โ€”
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

โš ๏ธ A surprising stack overflow lurks in the H3C Magic R100! Attackers could exploit the SetMobileAPInfoById parameter to wreak havoc. ๐Ÿ˜ฑ Think of it like a crowded elevator where too many people try to get in at once, forcing the doors to jam โ€” the system just can't handle that pressure! If exploited, this vulnerability could lead to unexpected crashes or erratic behavior, potentially locking users out or leaving sensitive data exposed. While the severity is currently classified as unknown, such stack overflow issues could allow attackers to take control of the device.

Put simply

Think of it like a crowded elevator where too many people try to get in at once, forcing the doors to jam โ€” the system just can't handle that pressure! This vulnerability occurs due to improper handling of the SetMobileAPInfoById parameter, allowing for a stack overflow when input exceeds expected limits, leading to unpredictable behavior.

What to do

If exploited, this vulnerability could lead to unexpected crashes or erratic behavior, potentially locking users out or leaving sensitive data exposed. While the severity is currently classified as unknown, such stack overflow issues could allow attackers to take control of the device. Update the H3C Magic R100 firmware to the latest version as soon as a patch is released. Regularly review device configurations to ensure parameters are kept within safe limits. You've got this! Stay vigilant, and with a few updates, you'll have your system secured in no time! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01665 ยท 76.5th percentile
Published
2022-06-08T13:24Z
EPSS history
Timeline
  • 08 JUN 13:24Z
    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm
    cvelistv5