PT-2023-24428 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered in the AddMacList interface at the "/goform/aspForm" API endpoint. This issue can be exploited due to insufficient validation of input data...

CVE-2023-33634

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm...

CVE-2023-33641

CVE-2023-33641 affects H3C Magic R300 firmware (R300-2100MV100R004). A stack overflow in the AddMacList interface at /goform/aspForm is caused by insufficient input/boundary validation, enabling a remote attacker to overflow a buffer and execute arbitrary code. Some sources describe authenticated...

PT-2023-24430 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the AddWlanMacList interface at the "/goform/aspForm" API endpoint. This issue affects the specified version of the H3C Magic R300...

CVE-2023-33633

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm...

PT-2023-24424 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered in the Edit BasicSSID 5G interface at the "/goform/aspForm" API endpoint. Recommendations: For H3C Magic R300 version R300-2100MV100R004, consider...

CVE-2023-33638

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditBasicSSID5G interface at /goform/aspForm...

PT-2023-24422 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the ipqos lanip editlist interface at the "/goform/aspForm" API endpoint. Recommendations: For H3C Magic R300 version R300-2100MV100R004, conside...

CVE-2023-33627

Summary (CVE-2023-33627) : Multiple sources confirm a stack overflow in H3C Magic R300, affecting version R300-2100MV100R004 . The vulnerability is triggered via the UpdateSnat interface exposed at the API endpoint /goform/aspForm . CVSS 3.1 metrics classify it as AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/...

H3C Magic R300 Buffer Error Vulnerability

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the DelSTList interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer overflow an...

H3C Magic R300-2100M Buffer Error Vulnerability

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in H3C Magic R300-2100M V100R004 version, which stems from the presence of a stack overflow...

PT-2023-24412 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the UpdateSnat interface at the "/goform/aspForm" API endpoint. This issue affects the H3C Magic R300 device. Recommendations: For H3C Magic R300...

CVE-2023-33639

CVE-2023-33639 concerns the H3C Magic R300 router (version R300-2100MV100R004), where a stack overflow is triggered via the SetMobileAPInfoById interface at /goform/aspForm. Multiple connected sources confirm the affected component and path; one CNVD entry explicitly notes the impact as potential...

H3C Magic R300 Buffer Error Vulnerability

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R300 R300-2100MV100R004 firmware version, which originates from the ipqoslanipdellist interface of /goform/aspForm contains a stack overflow...

CVE-2023-33637: Out-of-bounds Write

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm...

CVE-2023-33631

CVE-2023-33631 affects H3C Magic R300, specifically version R300-2100MV100R004, with a stack overflow in the DelSTList interface exposed at /goform/aspForm. Public sources describe boundary-check issues leading to a buffer overflow that can allow arbitrary code execution. Exploitation status is n...

CVE-2023-33628

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm...

HUAWEI EMUI/Magic UI input validation error vulnerability

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from an integer overflow iss...

HUAWEI EMUI/Magic UI security vulnerabilities

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from a lack of length...

Bad Magic's Extended Reign in Cyber Espionage Goes Back Over a Decade

New findings about a hacker group linked to cyber attacks targeting companies in the Russo-Ukrainian conflict area reveal that it may have been around for much longer than previously thought. The threat actor, tracked as Bad Magic aka Red Stinger, has not only been linked to a fresh sophisticated...