CVE-2023-27803

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*
cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*

History

07 Nov 2023, 04:10

Type Values Removed Values Added
References
  • {'url': 'https://hackmd.io/@0dayResearch/EdittriggerList', 'name': 'https://hackmd.io/@0dayResearch/EdittriggerList', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'}
  • () https://hackmd.io/%400dayResearch/EdittriggerList -

Information

Published : 2023-04-07 14:15

Updated : 2024-02-28 20:13


NVD link : CVE-2023-27803

Mitre link : CVE-2023-27803

CVE.ORG link : CVE-2023-27803


JSON object : View

Products Affected

h3c

  • magic_r100_firmware
CWE
CWE-787

Out-of-bounds Write