CVE-2023-34937: High severity H3C Magic B1st Firmware vulnerability

Published Jun 28, 2023

Updated

A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Affected Software

4 affected components

H3C Magic B1st Firmware=100r012

H3C Magic B1ST

All of the following

H3C Magic B1st Firmware=100r012

H3C Magic B1ST

Event History

Jun 28, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2023-34937.

What is the title of the vulnerability?

The title of the vulnerability is 'A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.'

What is the severity level of CVE-2023-34937?

The severity level of CVE-2023-34937 is high with a severity value of 7.5.

How does CVE-2023-34937 impact H3C Magic B1STV100R012 firmware?

CVE-2023-34937 allows attackers to cause a Denial of Service (DoS) on H3C Magic B1STV100R012 firmware through a stack overflow in the UpdateSnat function.

Is H3C Magic B1ST vulnerable to CVE-2023-34937?

No, H3C Magic B1ST is not vulnerable to CVE-2023-34937.

How can the stack overflow vulnerability in H3C Magic B1STV100R012 be fixed?

To fix the stack overflow vulnerability in H3C Magic B1STV100R012, apply the necessary patches or updates provided by the vendor.