CVE-2024-57479

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-57479
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://h3c.com Product
https://gist.github.com/XiaoCurry/c7214be67a44a4a8858c5138ecd05984 Broken Link
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:h3c:n12_firmware:100r005:*:*:*:*:*:*:*
cpe:2.3:h:h3c:n12:-:*:*:*:*:*:*:*
History

27 May 2025, 17:00

Type Values Removed Values Added
References () http://h3c.com - () http://h3c.com - Product
References () https://gist.github.com/XiaoCurry/c7214be67a44a4a8858c5138ecd05984 - () https://gist.github.com/XiaoCurry/c7214be67a44a4a8858c5138ecd05984 - Broken Link
CPE cpe:2.3:h:h3c:n12:-:*:*:*:*:*:*:*
cpe:2.3:o:h3c:n12_firmware:100r005:*:*:*:*:*:*:*
First Time H3c n12
H3c
H3c n12 Firmware

18 Mar 2025, 15:15

Type Values Removed Values Added
CWE CWE-120
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8

18 Feb 2025, 22:15

Type Values Removed Values Added
CWE CWE-120
CVSS v2 : unknown
v3 : 9.8 		v2 : unknown
v3 : unknown

16 Jan 2025, 16:15

Type Values Removed Values Added
CWE CWE-120
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
Summary
  • (es) H3C N12 V100R005 contiene una vulnerabilidad de desbordamiento de búfer debido a la falta de verificación de longitud en la función de actualización de la dirección MAC. Los atacantes que aprovechen esta vulnerabilidad con éxito pueden provocar que el dispositivo de destino remoto se bloquee o ejecute comandos arbitrarios enviando una solicitud POST a /bin/webs.

14 Jan 2025, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-14 22:15

Updated : 2025-05-27 17:00

NVD link : CVE-2024-57479

Mitre link : CVE-2024-57479

CVE.ORG link : CVE-2024-57479

JSON object : View

Products Affected

h3c

  • n12_firmware
  • n12
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')