CVE-2023-27808

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*
cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:53

Type Values Removed Values Added
References () https://hackmd.io/%400dayResearch/DeltriggerList - () https://hackmd.io/%400dayResearch/DeltriggerList -

07 Nov 2023, 04:10

Type Values Removed Values Added
References
  • {'url': 'https://hackmd.io/@0dayResearch/DeltriggerList', 'name': 'https://hackmd.io/@0dayResearch/DeltriggerList', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'}
  • () https://hackmd.io/%400dayResearch/DeltriggerList -

13 Apr 2023, 16:23

Type Values Removed Values Added
CWE CWE-787
CPE cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*
cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.9
References (MISC) https://hackmd.io/@0dayResearch/DeltriggerList - (MISC) https://hackmd.io/@0dayResearch/DeltriggerList - Exploit, Third Party Advisory
First Time H3c magic R100 Firmware
H3c

07 Apr 2023, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-07 14:15

Updated : 2025-02-12 17:15


NVD link : CVE-2023-27808

Mitre link : CVE-2023-27808

CVE.ORG link : CVE-2023-27808


JSON object : View

Products Affected

h3c

  • magic_r100_firmware
CWE
CWE-787

Out-of-bounds Write