CVE-2023-29696

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set

Critical · published May 8, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

🚨 A stack overflow in the H3C GR-1200W could turn your router into an unexpected vulnerability volcano! 🔥 Think of this as a pipe that can only handle so much water; if you pump in too much, it overflows and creates a mess. In this case, the function version_set is the pipe, and when it’s overwhelmed, things get chaotic! An attacker could exploit this stack overflow to corrupt memory, causing the device to crash or behave unpredictably. This means your internet connection could be interrupted, and worse, it could allow unauthorized access to the router, potentially compromising your entire network!

Put simply

Think of this as a pipe that can only handle so much water; if you pump in too much, it overflows and creates a mess. In this case, the function version_set is the pipe, and when it’s overwhelmed, things get chaotic! This vulnerability arises from a stack overflow in the version_set function, which does not properly handle input size. This flaw can be triggered by sending specially crafted data to the device, leading to arbitrary code execution.

What to do

An attacker could exploit this stack overflow to corrupt memory, causing the device to crash or behave unpredictably. This means your internet connection could be interrupted, and worse, it could allow unauthorized access to the router, potentially compromising your entire network! Update the H3C GR-1200W to the latest firmware version immediately to patch this vulnerability. Additionally, regularly audit your router settings and monitor for any suspicious activities to ensure your network remains secure. You've got this! Follow these steps to safeguard your network and become a true security superhero! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.2th percentile
Published
2023-05-08T00:00Z
EPSS history
Timeline
  • 08 MAY 00:00Z
    H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set
    cvelistv5