CVE-2022-36489: High severity h3c magic nx18 plus vulnerability
Published Aug 25, 2022
·Updated
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6.
Affected Software
2 affected components
H3C Magic Nx18 Plus Firmware=nx18pv100r003
H3C Magic NX18 Plus
Event History
Aug 25, 2022
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-36489?
CVE-2022-36489 is classified with a high severity due to the potential for remote exploitation through a stack overflow.
2
How do I fix CVE-2022-36489?
To mitigate CVE-2022-36489, update the H3C Magic NX18 Plus firmware to a version that addresses this stack overflow vulnerability.
3
What components are affected by CVE-2022-36489?
CVE-2022-36489 specifically affects the H3C Magic NX18 Plus firmware version nx18pv100r003.
4
Can CVE-2022-36489 be exploited remotely?
Yes, CVE-2022-36489 can be exploited remotely due to vulnerabilities in the EnableIpv6 function.
5
Is there a workaround for CVE-2022-36489?
Currently, the most effective workaround for CVE-2022-36489 is to disable IPv6 if it is not needed, until a patch is applied.