CVE-2022-37067

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚠️ A stack overflow hiding in H3C's GR-1200W MiniGRW1A0V100R006 could cause some serious headaches! Think of it like an assembly line where one faulty part causes everything to jam up — if this function isn't looked after, it could lead to a complete halt in the process, stopping your smooth internet experience in its tracks. While there's no known exploit yet, an attacker could potentially trigger this stack overflow, leading to unexpected behavior or even a crash. Imagine your router throwing a tantrum, leaving your devices in the digital dark—absolutely frustrating!

Put simply

Think of it like an assembly line where one faulty part causes everything to jam up — if this function isn't looked after, it could lead to a complete halt in the process, stopping your smooth internet experience in its tracks. The vulnerability in H3C GR-1200W occurs in the UpdateWanParamsMulti function, where unexpected input can overflow the stack, causing erratic behavior of the device.

What to do

While there's no known exploit yet, an attacker could potentially trigger this stack overflow, leading to unexpected behavior or even a crash. Imagine your router throwing a tantrum, leaving your devices in the digital dark—absolutely frustrating! To safeguard your network, keep an eye out for firmware updates from H3C and apply them as soon as they're available. Regularly check the manufacturer’s website for any new patches or advisories regarding this model. You've got this! Stay vigilant with your device updates, and you'll be a network superhero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01198 · 67.9th percentile
Published
2022-08-25T13:59Z
EPSS history
Timeline
  • 25 AUG 13:59Z
    H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti
    cvelistv5