2110 matches found
CVE-2023-27806
CVE-2023-27806 affects H3C Magic R100/R100V100R005.bin via the ipqos_lanip_dellist interface at /goform/aspForm, causing a stack overflow that can lead to Denial of Service. The provided documents consistently describe a DoS outcome from a crafted payload but do not include concrete exploitation ...
CVE-2023-27802
CVE-2023-27802 affects the H3C Magic R100 router (R100V100R005.bin). A stack overflow via the EditvsList parameter at /goform/aspForm is reported, enabling a Denial of Service through a crafted payload. The connected sources consistently identify the affected product and endpoint; no public fix/v...
CVE-2023-27808
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...
CVE-2023-27808
CVE-2023-27808 describes a stack overflow in H3C Magic R100 router component at the DeltriggerList interface (/goform/aspForm) of the R100V100R005.bin, enabling a crafted payload to trigger a Denial of Service. Affected product: H3C Magic R100 (R100V100R005.bin). Underlying cause: stack overflow ...
CVE-2023-27803
CVE-2023-27803 affects H3C Magic R100 firmware (R100V100R005.bin). A stack overflow via the EdittriggerList interface at /goform/aspForm allows a crafted payload to cause a Denial of Service. Public documents reference this description, and one PT-Security entry recommends disabling the API endpo...
CVE-2023-27810
The CVE concerns H3C Magic R100 family, specifically R100V100R005.bin, with a stack overflow in the ipqos_lanip_editlist interface exposed at /goform/aspForm. The root cause is a stack overflow when handling crafted payloads via the ipqos lanip editlist API, leading to Denial of Service. Document...
CVE-2023-27801
CVE-2023-27801 affects H3C Magic R100 family (R100V100R005.bin). The vulnerability is a stack overflow in the DelDNSHnList interface exposed via /goform/aspForm, leading to Denial of Service. The provided sources consistently describe the same root cause and impact (availability loss) without det...
CVE-2023-24093
An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password...
CVE-2023-24093
An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password...
Design/Logic Flaw
An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password...
CVE-2023-24093
An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password...
CVE-2023-24093
An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password...
CVE-2023-24093
CVE-2023-24093 affects H3C A210-G / A210-GV100R005. The issue is an access-control flaw that allows attackers to authenticate without a password, enabling unauthenticated access with high impact (confidentiality, integrity, availability). The provided documents confirm the device model but do not...
H3C A210-G A210-GV100R005 授权问题漏洞
The H3C A210-G is a ceiling-mounted wireless access point from China's Xinhua San H3C. A security vulnerability exists in the H3C A210-G A210-GV100R005 version that stems from an access control issue that allows an attacker to authenticate without a password...
PT-2023-19397 · H3C · H3C A210-G
Name of the Vulnerable Software and Affected Versions: H3C A210-G version A210-GV100R005 Description: The issue is related to access control, allowing attackers to authenticate without a password. Recommendations: For H3C A210-G version A210-GV100R005, consider restricting access to the device...
CVE-2022-45963
h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...
CVE-2022-45963
h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...
Privilege escalation
h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...
CVE-2022-45963
h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...
CVE-2022-45963
CVE-2022-45963 affects H3C Firewall versions <= 3.10 ESS6703. The vulnerability is a privilege bypass in the device’s authentication/authorization path, enabling an attacker with network access to achieve high-impact compromise (C/H/I/A = High) with no user interaction required. CVSS v3.1 base...