CVE-2022-37085

H3C H200 H200V100R004 was discovered to contain a stack overflow via the AddWlanMacList function

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚠️ A hidden stack overflow in H3C devices could leave your network vulnerable! This flaw in the AddWlanMacList function is a sneaky little gremlin to keep an eye on! Think of it as a crowded restaurant trying to serve too many orders at once, leading to chaos in the kitchen — if you pile on too many requests, someone’s going to drop the ball, or worse, serve the wrong dish! An attacker could exploit this stack overflow to crash the device, disrupting your wireless network and potentially leaving it open for other malicious activities. While the exact severity remains unknown, it’s a vulnerability that should not be ignored!

Put simply

Think of it as a crowded restaurant trying to serve too many orders at once, leading to chaos in the kitchen — if you pile on too many requests, someone’s going to drop the ball, or worse, serve the wrong dish! This stack overflow occurs in the AddWlanMacList function, where excessive data can be processed, leading to a potential crash or unpredictable behavior of the device.

What to do

An attacker could exploit this stack overflow to crash the device, disrupting your wireless network and potentially leaving it open for other malicious activities. While the exact severity remains unknown, it’s a vulnerability that should not be ignored! To safeguard against this vulnerability, check for any available patches from H3C and apply them promptly. Regularly monitor your network for unusual activity and consider implementing rate-limiting to avoid overwhelming functions with excessive requests. You’ve got this! Stay proactive about your network security and keep those vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2022-08-25T14:03Z
EPSS history
Timeline
  • 25 AUG 14:03Z
    H3C H200 H200V100R004 was discovered to contain a stack overflow via the AddWlanMacList function
    cvelistv5