VULNERABILITY INTELLIGENCE

CVE-2024-57480

CVSS score9.8 CRITICAL
EPSS probability0.56%
CISA KEVNot currently listed
Published2025-01-14
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-120

Primary references