CVE-2026-9393
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A buffer overflow vulnerability was found in H3C Magic B0 routers up to 100R002 in the Edit_BasicSSID_5G function of /goform/aspForm. The attack can be launched remotely and the exploit is public.
Risk Assessment
Buffer overflow could allow remote code execution, leading to full device compromise and network infiltration.
Recommendation
Disable remote access to the admin panel immediately and contact the vendor for patches.
Other vulnerabilities in H3C Magic B0
See all- CVE-2026-10259High
In H3C Magic B0 up to version 100R002, a vulnerability exists in the SetMobileAPInfoById function of the /goform/aspForm file. Manipulation of the param argument leads to a stack-based buffer overflow, which can be exploited remotely. The exploit has been publicly disclosed.
- CVE-2025-14015High
A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Original NVD description (English source)
A vulnerability was found in H3C Magic B0 up to 100R002. This affects the function Edit_BasicSSID_5G of the file /goform/aspForm. Performing a manipulation of the argument param results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS