CVE-2024-38903: Command Injection
Published Jun 24, 2024
·Updated
H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands.
Affected Software
3 affected components
H3C Magic R230
All of the following
H3C Magic R230 Firmware=100r002
H3C Magic R230
Event History
Jun 24, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38903?
CVE-2024-38903 has been rated as critical due to the potential for arbitrary command execution.
2
How do I fix CVE-2024-38903?
To fix CVE-2024-38903, update the H3C Magic R230 firmware to the latest version that addresses this vulnerability.
3
What type of command can be executed through CVE-2024-38903?
CVE-2024-38903 allows attackers to execute arbitrary commands on the device through the vulnerable udpserver.
4
What is the affected version of H3C Magic R230 for CVE-2024-38903?
The affected version for CVE-2024-38903 is H3C Magic R230 V100R002.
5
Which port is involved in the CVE-2024-38903 vulnerability?
CVE-2024-38903 involves the udpserver listening on port 9034.