CVE-2023-33636: High severity H3C Magic R300-2100m Firmware vulnerability
Published May 31, 2023
·Updated
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm.
Affected Software
4 affected components
H3C Magic R300-2100m Firmware=r300-2100mv100r004
H3C Magic R300-2100m
All of the following
H3C Magic R300-2100m Firmware=r300-2100mv100r004
H3C Magic R300-2100m
Event History
May 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
09:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-33636?
CVE-2023-33636 is a vulnerability found in H3C Magic R300 version R300-2100MV100R004 that allows for a stack overflow via the ipqos_lanip_editlist interface.
2
How severe is CVE-2023-33636?
CVE-2023-33636 has a severity rating of 7.2, indicating a high severity.
3
How can CVE-2023-33636 be exploited?
CVE-2023-33636 can be exploited by sending a specially crafted request to the ipqos_lanip_editlist interface at /goform/aspForm.
4
Is H3C Magic R300 version R300-2100MV100R004 affected by CVE-2023-33636?
Yes, H3C Magic R300 version R300-2100MV100R004 is affected by CVE-2023-33636.
5
How can I mitigate the vulnerability in H3C Magic R300 version R300-2100MV100R004?
To mitigate the vulnerability, it is recommended to update to a patched version of the firmware provided by H3C.