CVE-2023-33627: High severity H3C Magic R300-2100m Firmware vulnerability
Published May 31, 2023
·Updated
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.
Affected Software
4 affected components
All of the following
H3C Magic R300-2100m Firmware=r300-2100mv100r004
H3C Magic R300-2100m
H3C Magic R300-2100m Firmware=r300-2100mv100r004
H3C Magic R300-2100m
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
H3C Magic R300to a version that resolves this vulnerability.Fixed in R300-2100MV100R004
Event History
May 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
09:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-33627?
CVE-2023-33627 is a stack overflow vulnerability found in H3C Magic R300 version R300-2100MV100R004.
2
How severe is CVE-2023-33627?
CVE-2023-33627 has a severity rating of 7.2 (high).
3
How does CVE-2023-33627 affect H3C Magic R300?
CVE-2023-33627 affects H3C Magic R300 version R300-2100MV100R004 by causing a stack overflow via the UpdateSnat interface at /goform/aspForm.
4
Is H3C Magic R300 version R300-2100MV100R004 the only affected software version?
Yes, H3C Magic R300 version R300-2100MV100R004 is the only affected software version.
5
Is there a fix available for CVE-2023-33627?
It is recommended to update to a patched version of H3C Magic R300 firmware to fix CVE-2023-33627.