A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

H3C ER6300G2 Config File userLogin.asp path traversal

A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPInfoById.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditMacList.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAP5GWifiById.

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetMobileAPInfoById.