CVE-2025-4446

Summary

A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function Edit_List_SSID of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack needs to be approached within the local network.

Affected Software

Weaknesses

• CWE-120: Buffer Overflow
• CWE-119: Memory Corruption

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://vuldb.com/?id.308056
• https://vuldb.com/?ctiid.308056
• https://vuldb.com/?submit.561866
• https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20GB5400AX/5.md

• ←Previous
• Next→