H3C Magic R300 Buffer Error Vulnerability

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability, which is caused by incorrect boundary checking of the AddWlanMacList interface on /goform/aspForm. An attacker could exploit this vulnerability to cause a buffer...

CVE-2023-33640

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm...

CVE-2023-33627

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm...

H3C Magic R300 Buffer Error Vulnerability

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability caused by a failure to properly bounds check the SetMobileAPInfoById interface on /goform/aspForm. An authenticated, remote attacker could exploit this vulnerability...

CVE-2023-33632

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqoslanipdellist interface at /goform/aspForm...

CVE-2023-33642

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditBasicSSID interface at /goform/aspForm...

CVE-2023-33640

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm...

CVE-2023-33637

Summary: CVE-2023-33637 affects H3C Magic R300, specifically the R300-2100MV100R004 firmware. The issue is a stack overflow exposed via the DelDNSHnList interface at the /goform/aspForm API endpoint. Details from sources: A stack overflow vulnerability is reported for the DelDNSHnList interface i...

CVE-2023-33640

The CVE-2023-33640 entry concerns the H3C Magic R300 router. A stack overflow vulnerability is exposed via the SetAPWifiorLedInfoById interface at the /goform/aspForm endpoint, affecting H3C Magic R300 version R300-2100MV100R004. The issue is described in CNVD/CNNVD and related records as a buffe...

CVE-2023-33643

CVE-2023-33643 affects the H3C Magic R300 router (version R300-2100MV100R004). The vulnerability is a stack overflow in the AddWlanMacList interface at /goform/aspForm, caused by improper boundary checking. Public descriptions indicate this could lead to a buffer overflow and, in some sources, ar...

CVE-2023-33635

CVE-2023-33635 affects H3C Magic R300 firmware (R300-2100MV100R004). The vulnerability is a stack overflow exposed via the UpdateMacClone interface at /goform/aspForm, triggered through network access without user interaction. The CVSS 3.1 vector/metrics in the primary records indicate a HIGH sev...

CVE-2023-33633

The CVE-2023-33633 issue affects H3C Magic R300 devices, specifically version R300-2100MV100R004, where a stack overflow is triggered via the UpdateWanParams interface at /goform/aspForm. The NVD/CVSS entry indicates a network-scoped vulnerability with high impact to confidentiality, integrity, a...

CVE-2023-33628

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm...

CVE-2023-33630

CVE-2023-33630 concerns a stack overflow in the H3C Magic R300 router (version R300-2100MV100R004) triggered via the EditvsList interface at /goform/aspForm. The underlying cause is improper boundary checking on the EditvsList API, leading to a potential buffer/stack overflow. Public descriptions...

CVE-2023-33641

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm...

PT-2023-24416 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the EditvsList interface at the "/goform/aspForm" API endpoint. This issue affects the specified version of the H3C Magic R300. Recommendations:...

CVE-2023-33629

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm...

CVE-2023-33635

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm...

CVE-2023-33636

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

CVE-2023-33629

The H3C Magic R300 router, specifically version R300-2100MV100R004 , is vulnerable to a stack overflow due to incorrect boundary checking in the DeltriggerList interface at the /goform/aspForm endpoint. An authenticated high-privilege attacker can exploit this via command injection in the DelL2tp...