CVE-2024-57480

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-57480
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://h3c.com Product
https://gist.github.com/XiaoCurry/16213a4d68f95f17cd0fc2cd07e78a90 Broken Link
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:h3c:n12_firmware:100r005:*:*:*:*:*:*:*
cpe:2.3:h:h3c:n12:-:*:*:*:*:*:*:*
History

27 May 2025, 17:00

Type Values Removed Values Added
References () http://h3c.com - () http://h3c.com - Product
References () https://gist.github.com/XiaoCurry/16213a4d68f95f17cd0fc2cd07e78a90 - () https://gist.github.com/XiaoCurry/16213a4d68f95f17cd0fc2cd07e78a90 - Broken Link
First Time H3c n12
H3c
H3c n12 Firmware
CPE cpe:2.3:h:h3c:n12:-:*:*:*:*:*:*:*
cpe:2.3:o:h3c:n12_firmware:100r005:*:*:*:*:*:*:*

18 Mar 2025, 18:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-120

18 Feb 2025, 22:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.8 		v2 : unknown
v3 : unknown
CWE CWE-120

16 Jan 2025, 16:15

Type Values Removed Values Added
CWE CWE-120
Summary
  • (es) H3C N12 V100R005 contiene una vulnerabilidad de desbordamiento de búfer debido a la falta de verificación de longitud en la función de configuración de AP. Los atacantes que aprovechen esta vulnerabilidad con éxito pueden provocar que el dispositivo de destino remoto se bloquee o ejecute comandos arbitrarios enviando una solicitud POST a /bin/webs.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8

14 Jan 2025, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-14 22:15

Updated : 2025-05-27 17:00

NVD link : CVE-2024-57480

Mitre link : CVE-2024-57480

CVE.ORG link : CVE-2024-57480

JSON object : View

Products Affected

h3c

  • n12_firmware
  • n12
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')