CVE-2022-36513

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist

Critical · published August 25, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

🔥 A critical stack overflow lurks in the H3C GR-1200W, potentially letting attackers run wild! Picture a busy restaurant kitchen where one dish is so poorly prepped that it spills over into every other dish being made. This stack overflow mishap lets attackers inject overflowing code, disrupting everything else on the server. An attacker could exploit this vulnerability to crash the system or execute arbitrary code, wreaking havoc like a surprise food fight in the kitchen! The consequences could range from service downtime to full system compromise, leaving your network vulnerable and exposed.

Put simply

Picture a busy restaurant kitchen where one dish is so poorly prepped that it spills over into every other dish being made. This stack overflow mishap lets attackers inject overflowing code, disrupting everything else on the server. The stack overflow occurs in the `edditactionlist` function, where inadequate boundary checks allow too much data to be processed, leading to a crash or unauthorized execution of code.

What to do

An attacker could exploit this vulnerability to crash the system or execute arbitrary code, wreaking havoc like a surprise food fight in the kitchen! The consequences could range from service downtime to full system compromise, leaving your network vulnerable and exposed. Patch the device immediately to the latest firmware version to eliminate this vulnerability. Regularly monitor for updates and consider implementing additional security measures like network segmentation to limit exposure. You’ve got this! By taking these steps, you’ll strengthen your defenses and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01214 · 68.3th percentile
Published
2022-08-25T13:58Z
EPSS history
Timeline
  • 25 AUG 13:58Z
    H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist
    cvelistv5