CVE-2026-8764: H3C Magic B3 aspForm UpdateWanParams buffer overflow
A security vulnerability has been detected in H3C Magic B3 up to 100R002. This affects the function UpdateWanParams of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
H3C Magic B3to a version that resolves this vulnerability.Fixed in 100R002
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8764?
CVE-2026-8764 is classified as a critical vulnerability due to its potential for remote code execution via buffer overflow.
How do I fix CVE-2026-8764?
To mitigate CVE-2026-8764, users should update their H3C Magic B3 devices to the latest firmware version beyond 100R002.
What are the potential impacts of CVE-2026-8764?
Exploiting CVE-2026-8764 may allow an attacker to execute arbitrary code, leading to unauthorized access and control over the affected device.
Who is affected by CVE-2026-8764?
CVE-2026-8764 affects users of the H3C Magic B3 devices running firmware versions up to and including 100R002.
Can CVE-2026-8764 be exploited remotely?
Yes, CVE-2026-8764 can be exploited remotely, allowing attackers to potentially gain control without physical access.