First published: Tue Jan 14 2025(Updated: )
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
H3C N12 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-57479 is classified as a critical vulnerability due to its potential to allow remote code execution and denial of service.
To fix CVE-2024-57479, update the H3C N12 device to the latest firmware provided by H3C that addresses the buffer overflow vulnerability.
If exploited, CVE-2024-57479 may allow an attacker to crash the device or execute arbitrary commands remotely.
CVE-2024-57479 specifically affects the H3C N12 V100R005 model.
Yes, CVE-2024-57479 can be exploited remotely by sending a crafted POST request to the vulnerable endpoint.