CVE-2024-57480: Buffer Overflow
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
H3C N12to a version that resolves this vulnerability.Fixed in V100R005
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57480?
CVE-2024-57480 is a critical vulnerability that can lead to remote device crashes or arbitrary command execution.
How do I fix CVE-2024-57480?
To resolve CVE-2024-57480, update the H3C N12 device firmware to the latest version that addresses the buffer overflow issue.
What systems are affected by CVE-2024-57480?
The affected system by CVE-2024-57480 is the H3C N12 model running the V100R005 version.
What type of vulnerability is CVE-2024-57480?
CVE-2024-57480 is classified as a buffer overflow vulnerability due to improper length verification.
What are the potential consequences of exploiting CVE-2024-57480?
Exploiting CVE-2024-57480 can allow attackers to crash the device or execute arbitrary commands remotely.