CVE-2026-6581: H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow
A vulnerability was detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function SetMobileAPInfoById of the file /goform/aspForm. Performing a manipulation of the argument param results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6581?
CVE-2026-6581 is considered a high severity vulnerability due to the possibility of remote code execution through a buffer overflow.
How do I fix CVE-2026-6581?
To fix CVE-2026-6581, update H3C Magic B1 to a version higher than 100R004 that addresses this vulnerability.
What systems are affected by CVE-2026-6581?
CVE-2026-6581 affects H3C Magic B1 devices running versions up to and including 100R004.
What type of vulnerability is CVE-2026-6581?
CVE-2026-6581 is a buffer overflow vulnerability that can be exploited remotely.
Can CVE-2026-6581 be exploited remotely?
Yes, CVE-2026-6581 can be exploited remotely, potentially allowing attackers to execute arbitrary code.