CVE-2022-34601

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm

published July 20, 2022

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in the Delstlist interface of the H3C Magic R200! This could lead to unexpected behavior if triggered. 🔥 Think of it like a restaurant where someone orders too many items, and the kitchen just can't handle the glut — it crashes under the pressure, leaving everyone hungry and frustrated! If exploited, this stack overflow could lead to unpredictable behavior in the device, potentially allowing an attacker to crash the system or cause denial of service. While it’s not known to be actively exploited, the risks to device stability and user experience are real.

Put simply

Think of it like a restaurant where someone orders too many items, and the kitchen just can't handle the glut — it crashes under the pressure, leaving everyone hungry and frustrated! This vulnerability occurs due to inadequate handling of input at the /goform/aspForm endpoint, allowing excessive data to overflow the stack and disrupt normal operations.

What to do

If exploited, this stack overflow could lead to unpredictable behavior in the device, potentially allowing an attacker to crash the system or cause denial of service. While it’s not known to be actively exploited, the risks to device stability and user experience are real. To protect against this vulnerability, ensure that your device firmware is updated to the latest version recommended by H3C. Regularly check for patches that address this issue and enhance input validation to mitigate risks. You've got this! Stay vigilant and keep your systems updated to maintain your hero status! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01187 · 67.6th percentile
Published
2022-07-20T13:41Z
EPSS history
Timeline
  • 20 JUL 13:41Z
    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm
    cvelistv5