CVE-2026-112373: H3C Magic NX15 usrlist sub_416874 stack-based overflow
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
Which deployments are known to be affected?
The affected product and version identified in the available data are H3C Magic NX15 running NX15V100R017. The vulnerable code is in /usr/bin/usrlist, specifically the sub_416874 function.
Can this be exploited remotely, and does an attacker need access first?
The vulnerability is described as remotely exploitable. The supplied severity vector indicates low attack complexity and requires low privileges, so an attacker needs some level of authenticated or otherwise granted privileges before exploitation.
What is the likely security impact?
Successful exploitation can cause a stack-based buffer overflow with high availability impact. The supplied assessment indicates no confidentiality or integrity impact.
Is there evidence that exploitation may occur?
An exploit has been publicly disclosed and may be used. This increases the practical risk for exposed affected devices.