H3C Magic R100 Buffer Error Vulnerability

The H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100 R100V100R005.bin version, which originates from a discovery containing a stack overflow via the ipqoslanipdellist interface of /goform/aspForm. An attacker could exploit the...

CVE-2023-27801: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27805: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27810

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

PT-2023-21351

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005.bin Description A stack overflow was discovered via the DelDNSHnList interface at "/goform/aspForm". This issue allows attackers to cause a Denial of Service DoS via a crafted payload. Recommendations For H3...

CVE-2023-27803

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27810

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27806

CVE-2023-27806 affects H3C Magic R100/R100V100R005.bin via the ipqos_lanip_dellist interface at /goform/aspForm, causing a stack overflow that can lead to Denial of Service. The provided documents consistently describe a DoS outcome from a crafted payload but do not include concrete exploitation ...

CVE-2023-27803

CVE-2023-27803 affects H3C Magic R100 firmware (R100V100R005.bin). A stack overflow via the EdittriggerList interface at /goform/aspForm allows a crafted payload to cause a Denial of Service. Public documents reference this description, and one PT-Security entry recommends disabling the API endpo...

PT-2023-21352 · H3C · H3C Magic R100

Name of the Vulnerable Software and Affected Versions: H3C Magic R100 version R100V100R005.bin Description: A stack overflow issue was discovered via the EditvsList parameter at the "/goform/aspForm" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted payload...

PT-2023-21353 · H3C · H3C Magic R100

Name of the Vulnerable Software and Affected Versions: H3C Magic R100 version R100V100R005.bin Description: A stack overflow issue was discovered via the EdittriggerList interface at the "/goform/aspForm" API endpoint. This allows attackers to cause a Denial of Service DoS via a crafted payload...

PT-2023-21355

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005.bin Description A stack overflow was discovered via the EditSTList interface at the "/goform/aspForm" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27802

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27808

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

PT-2023-21358 · H3C · H3C Magic R100

Name of the Vulnerable Software and Affected Versions: H3C Magic R100 version R100V100R005.bin Description: A stack overflow issue was discovered via the DeltriggerList interface at the "/goform/aspForm" API endpoint. This issue allows attackers to cause a Denial of Service DoS by sending a craft...

CVE-2023-27802

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27807

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27804

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27808

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

PT-2023-21360 · H3C · H3C Magic R100

Name of the Vulnerable Software and Affected Versions: H3C Magic R100 version R100V100R005.bin Description: A stack overflow issue was discovered via the ipqos lanip editlist interface at the "/goform/aspForm" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafte...