PT-2023-24425 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the SetMobileAPInfoById interface at the "/goform/aspForm" API endpoint. Recommendations: For H3C Magic R300 version R300-2100MV100R004, consider...

PT-2023-24414 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the DeltriggerList interface at the "/goform/aspForm" API endpoint. Recommendations: For H3C Magic R300 version R300-2100MV100R004, consider...

CVE-2023-33641

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm...

CVE-2023-33635

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm...

PT-2023-24416 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the EditvsList interface at the "/goform/aspForm" API endpoint. This issue affects the specified version of the H3C Magic R300. Recommendations:...

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the DelSTList interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer overflow an...

CVE-2023-33634

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm...

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R300 R300-2100MV100R004 firmware version, which originates from the EditBasicSSID5G interface of /goform/aspForm contains a stack overflow...

CVE-2023-33628

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm...

CVE-2023-33636

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

CVE-2023-33635

CVE-2023-33635 affects H3C Magic R300 firmware (R300-2100MV100R004). The vulnerability is a stack overflow exposed via the UpdateMacClone interface at /goform/aspForm, triggered through network access without user interaction. The CVSS 3.1 vector/metrics in the primary records indicate a HIGH sev...

CVE-2023-33637

Summary: CVE-2023-33637 affects H3C Magic R300, specifically the R300-2100MV100R004 firmware. The issue is a stack overflow exposed via the DelDNSHnList interface at the /goform/aspForm API endpoint. Details from sources: A stack overflow vulnerability is reported for the DelDNSHnList interface i...

CVE-2023-33638

The CVE-2023-33638 affects H3C Magic R300 firmware version R300-2100MV100R004, where a stack overflow exists in the Edit_BasicSSID_5G interface at /goform/aspForm. The issue is triggered via the Edit_BasicSSID_5G endpoint and is described with high impact on confidentiality, integrity, and availa...

CVE-2023-33634

CVE-2023-33634 affects H3C Magic R300 firmware R300-2100MV100R004, with a stack overflow via the EdittriggerList interface at /goform/aspForm. Affected component: router firmware; vulnerability appears in the EdittriggerList handling. CVSS v3.1: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H; base score 7.2...

CVE-2023-33641

CVE-2023-33641 affects H3C Magic R300 firmware (R300-2100MV100R004). A stack overflow in the AddMacList interface at /goform/aspForm is caused by insufficient input/boundary validation, enabling a remote attacker to overflow a buffer and execute arbitrary code. Some sources describe authenticated...

CVE-2023-33639

CVE-2023-33639 concerns the H3C Magic R300 router (version R300-2100MV100R004), where a stack overflow is triggered via the SetMobileAPInfoById interface at /goform/aspForm. Multiple connected sources confirm the affected component and path; one CNVD entry explicitly notes the impact as potential...

PT-2023-24418 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the ipqos lanip dellist interface at the "/goform/aspForm" API endpoint. Recommendations: For H3C Magic R300 version R300-2100MV100R004, as a...

HUAWEI EMUI/Magic UI 输入验证错误漏洞

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from an integer overflow iss...

HUAWEI EMUI/Magic UI 安全漏洞

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from a lack of length...

Bad Magic's Extended Reign in Cyber Espionage Goes Back Over a Decade

New findings about a hacker group linked to cyber attacks targeting companies in the Russo-Ukrainian conflict area reveal that it may have been around for much longer than previously thought. The threat actor, tracked as Bad Magic aka Red Stinger, has not only been linked to a fresh sophisticated...