CVE-2023-34924
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jun 26, 2023
Updated: Jul 7, 2023
CWE ID 787
Summary
CVE-2023-34924 is a newly discovered vulnerability affecting H3C Magic B1STW B1STV100R012 devices. This issue involves a stack overflow in the SetAPInfoById function, which can be exploited by attackers through a crafted POST request. By sending such a request, they can cause a Denial of Service (DoS) condition, rendering the device unresponsive and potentially disrupting network services. This vulnerability poses a significant risk to organizations using these devices and requires prompt patching to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- New H3C Technologies Co. Ltd.