CVE-2022-34606

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp

published July 20, 2022

CVSS
—
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurking in the EditvsList parameter of H3C Magic R200 could lead to some unexpected chaos! Think of it like a waiter getting a massive stack of orders all at once, causing them to drop everything — this overflow can crash the system instead of processing requests smoothly. If exploited, this vulnerability could potentially allow an attacker to disrupt the device's operation, making it unresponsive and forcing a reset. While the immediate danger may not be high, the service interruptions could be frustrating for users relying on the device.

Put simply

Think of it like a waiter getting a massive stack of orders all at once, causing them to drop everything — this overflow can crash the system instead of processing requests smoothly. This vulnerability arises from a stack overflow in the EditvsList parameter at /dotrace.asp, where excessive data input can overflow the memory stack, leading to unpredictable behavior or crashes.

What to do

If exploited, this vulnerability could potentially allow an attacker to disrupt the device's operation, making it unresponsive and forcing a reset. While the immediate danger may not be high, the service interruptions could be frustrating for users relying on the device. To mitigate this, ensure that the firmware on your H3C Magic R200 device is updated to the latest version. Additionally, monitor the input data for the EditvsList parameter to ensure it falls within safe limits, preventing buffer overflow issues. You've got this! With a few updates and careful monitoring, you can keep your systems running smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01187 · 67.7th percentile
Published
2022-07-20T13:41Z
EPSS history
Timeline
  • 20 JUL 13:41Z
    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp
    cvelistv5