SAP Business Planning and Consolidation Cross-Site Scripting Vulnerability (CNVD-2023-40159)

The H3C GR-1200W is a Gigabit enterprise wireless router from China’s Xinhua San (H3C). A buffer overflow vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version, which stems from the discovery of a contained stack overflow vulnerability via the function set_tftp_upgrad. A remote attacker can exploit this vulnerability to execute arbitrary code.