CVE-2022-36518

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurking in the H3C GR-1200W router could turn your home network into a playground for mischief-makers! Think of it like a crowded restaurant where one table keeps ordering more food than they can eat — eventually, the kitchen gets overwhelmed and might serve the wrong dishes, or worse, run out entirely. This flaw in the EditWlanMacList function could let attackers push the device beyond its limits! If exploited, this stack overflow might allow an attacker to crash the router or even run arbitrary code, leaving your network vulnerable to unauthorized access. This could mean anything from losing connectivity to jeopardizing sensitive data. Yikes!

Put simply

Think of it like a crowded restaurant where one table keeps ordering more food than they can eat — eventually, the kitchen gets overwhelmed and might serve the wrong dishes, or worse, run out entirely. This flaw in the EditWlanMacList function could let attackers push the device beyond its limits! The vulnerability stems from a stack overflow in the function EditWlanMacList, which fails to adequately validate input, potentially allowing an attacker to manipulate memory allocation on the device.

What to do

If exploited, this stack overflow might allow an attacker to crash the router or even run arbitrary code, leaving your network vulnerable to unauthorized access. This could mean anything from losing connectivity to jeopardizing sensitive data. Yikes! To secure your router, check for firmware updates from H3C and apply any patches available. It's also wise to limit external access where possible and regularly review your network settings. Stay proactive! You've got this! A few simple steps and your network will be fortified in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01214 · 68.3th percentile
Published
2022-08-25T13:58Z
EPSS history
Timeline
  • 25 AUG 13:58Z
    H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList
    cvelistv5