CVE-2023-34933: High severity H3C Magic B1st Firmware vulnerability

Published Jun 28, 2023

Updated

A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Affected Software

4 affected components

H3C Magic B1st Firmware=100r012

H3C Magic B1ST

All of the following

H3C Magic B1st Firmware=100r012

H3C Magic B1ST

Event History

Jun 28, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-34933?

CVE-2023-34933 is a vulnerability in the H3C Magic B1STV100R012 firmware that allows attackers to cause a Denial of Service (DoS) by exploiting a stack overflow in the UpdateWanParams function.

How severe is CVE-2023-34933?

CVE-2023-34933 has a severity rating of 7.5 (high).

How can attackers exploit CVE-2023-34933?

Attackers can exploit CVE-2023-34933 by sending a crafted POST request to the affected device, which triggers a stack overflow in the UpdateWanParams function.

Which software versions are affected by CVE-2023-34933?

The H3C Magic B1STV100R012 firmware version is affected by CVE-2023-34933.

Is the H3C Magic B1ST vulnerable to CVE-2023-34933?

No, the H3C Magic B1ST device itself is not vulnerable to CVE-2023-34933, only the B1STV100R012 firmware version is affected.

Is there a fix for CVE-2023-34933?

At the moment, there is no known fix or patch available for CVE-2023-34933. It is recommended to follow the vendor's advisories for any updates or mitigation steps.

Where can I find more information about CVE-2023-34933?

You can find more information about CVE-2023-34933 on the GitHub page: https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34933.md

What is the Common Weakness Enumeration (CWE) ID for CVE-2023-34933?

The Common Weakness Enumeration (CWE) ID for CVE-2023-34933 is CWE-787 (Out-of-bounds Write).