CVE-2023-33637

HighCVSS 7.2

Published: 31/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.93%

56th percentile - higher than 56% of all known CVEs

Summary

H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the DelDNSHnList interface at /goform/aspForm.

Risk Assessment

Exploitation of this vulnerability could lead to remote code execution, posing a significant security risk to the system.

Recommendation

It is recommended to update the device to the latest firmware version to mitigate this vulnerability.

Other vulnerabilities in H3C Magic R300

See all

CVE-2023-33643High
H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.
CVE-2023-33642High
H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the Edit_BasicSSID interface at /goform/aspForm.
CVE-2023-33641High
H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the AddMacList interface at /goform/aspForm.
CVE-2023-33640High
H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.
CVE-2023-33639High
H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm.
CVE-2023-33638High
H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the Edit_BasicSSID_5G interface at /goform/aspForm.
CVE-2023-33636High
H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the ipqos_lanip_editlist interface at /goform/aspForm.
CVE-2023-33635High
H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.
CVE-2023-33634High
H3C Magic R300 version R300-2100MV100R004 is found to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.
CVE-2023-33633High
H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the UpdateWanParams interface at /goform/aspForm.

Original NVD description (English source)

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.