CVE-2025-10942: H3C Magic B3 aspForm EditMacList buffer overflow
A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10942?
CVE-2025-10942 is considered a high severity vulnerability due to its potential for remote exploitation and buffer overflow.
How do I fix CVE-2025-10942?
To mitigate CVE-2025-10942, you should update your H3C Magic B3 device to the latest firmware version beyond 100R002.
What systems are affected by CVE-2025-10942?
CVE-2025-10942 affects H3C Magic B3 devices running versions up to 100R002.
Can CVE-2025-10942 be exploited remotely?
Yes, CVE-2025-10942 can be exploited remotely, allowing attackers to initiate an attack from outside the network.
What is the impact of exploiting CVE-2025-10942?
Exploiting CVE-2025-10942 can lead to arbitrary code execution due to the buffer overflow vulnerability.