CVE-2022-34605

The CVE-2022-34605 entry concerns the H3C Magic R200 family (R200R004L02 firmware, variant R200V200R004L02) with a stack overflow triggered by the HOST parameter in /dotrace.asp. Root cause: improper handling of HOST parameter leads to stack overflow. Impact per sources indicates high severity (f...

CVE-2022-34606

CVE-2022-34606 affects H3C Magic R200 R200V200R004L02. A stack overflow in the /dotrace.asp EditvsList parameter is reported, with exploitation described as potentially crashing the service and, in some sources, executing arbitrary code in the application context. Remote attacker access is implie...

CVE-2022-34604

CVE-2022-34604 affects H3C Magic R200 series (R200R004L02) and is caused by a stack overflow in the INTF parameter of dotrace.asp. The issue is documented with a CVSS v3.1 base score of 9.8 (CRITICAL) and a network attack vector with no user interaction required, leading to high impact on confide...

CVE-2022-34604

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp...

CVE-2022-34602

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

CVE-2022-34603

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm...

CVE-2022-34602

CVE-2022-34602 affects H3C Magic R200/R200V200R004L02, with a stack overflow in the ipqos_lanip_editlist interface at /goform/aspForm. Connected documents confirm the vulnerable component and root cause (stack overflow) but provide no exploitation status or remediation details. CVSS v3.1 metrics ...

CVE-2022-34603

CVE-2022-34603 affects H3C Magic R200 family (R200/R200V200R004L02). A stack overflow is triggered via the DelDNSHnList interface at /goform/aspForm, per Red Hat/NVD/CVE records and Red Hat/PRION/CVE listings. The CVSS v3.1 base score is 9.8 (CRITICAL), with NETWORK attack vector, no privileges r...

CVE-2022-34601

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm...

CVE-2022-34601

The provided connected documents identify CVE-2022-34601 as a real stack overflow vulnerability in the H3C Magic R200 family (R200V200R004L02) exposed via the Delstlist interface at /goform/aspForm. Root cause: stack overflow in the Delstlist handling. Impact: high/critical confidentiality, integ...

CVE-2022-34600

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm...

CVE-2022-34600

CVE-2022-34600 affects H3C Magic R200/R200V200R004L02 routers. The issue is a stack overflow in the EditSTList interface exposed via the path /goform/aspForm. Public documentation indicates a high-severity, network-reachable condition with potential for denial-of-service or device instability, bu...

CVE-2022-34599

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm...

CVE-2022-34599

The CVE-2022-34599 entry covers the H3C Magic R200 family (R200V200R004L02) with a stack overflow in the EdittriggerList interface exposed via /goform/aspForm. The underlying issue is a stack overflow in this interface, leading to a high-severity impact (per CVSS: critical, network attack vector,...

tanzstudio-magic-dance.de Cross Site Scripting vulnerability OBB-2799454

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-34608: Out-of-bounds Write

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget...

PT-2022-22239

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered, which can be triggered via the ajaxmsg parameter at the "/AJAX/ajaxget" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, avoid...

PT-2022-22235

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the INTF parameter at the "/dotrace.asp" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, consider restricting access to the...

PT-2022-22240

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the INTF parameter at the "/doping.asp" API endpoint. Recommendations For version R200V200R004L02, avoid using the INTF parameter in the "/doping.asp"...

PT-2022-22230

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the EdittriggerList interface at the "/goform/aspForm" API endpoint. This issue affects the H3C Magic R200 device. Recommendations For H3C Magic R200...