First published: Fri Apr 07 2023(Updated: )
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
H3c Magic R100 Firmware | =v100r005 | |
H3c Magic R100 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this H3C Magic R100 firmware vulnerability is CVE-2023-27806.
The severity of CVE-2023-27806 is medium with a severity value of 4.9.
CVE-2023-27806 allows attackers to cause a Denial of Service (DoS) by exploiting a stack overflow vulnerability in the ipqos_lanip_dellist interface of H3C Magic R100 firmware.
Yes, H3C Magic R100 firmware version v100r005 is affected by CVE-2023-27806.
At the moment, there is no known fix or patch available for CVE-2023-27806. It is recommended to follow vendor advisories for any updates or mitigation measures.