CVE-2024-57473: Buffer Overflow
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57473?
CVE-2024-57473 has a high severity rating due to its buffer overflow vulnerability that can lead to device crashes or remote command execution.
How do I fix CVE-2024-57473?
To fix CVE-2024-57473, apply the latest patches and updates provided by H3C for the N12 device.
What types of devices are affected by CVE-2024-57473?
CVE-2024-57473 specifically affects H3C N12 devices running V100R005.
What is the impact of exploiting CVE-2024-57473?
Exploiting CVE-2024-57473 can cause the affected device to crash or allow an attacker to execute arbitrary commands.
Is there any workaround for CVE-2024-57473 until a patch is available?
Currently, it is advised to limit external access to the affected H3C N12 devices as a temporary measure against CVE-2024-57473.