Search vulnerabilities

Results 220

Export CSV
CVE-2024-57479

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
H3c
Products
CVE-2024-57482

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
H3c
Products
CVE-2024-57473

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
H3c
Products
CVE-2024-57480

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
H3c
Products
CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2024-42637

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-24093

An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-27810

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-27808

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-27807

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-27806

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-27805

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-27803

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-27802

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
H3c
CVE-2023-27801

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
H3c