CVE-2023-33628

Summary

CVE-2023-33628 is a newly identified stack overflow vulnerability affecting H3C Magic R300 routers running version R300-2100MV100R004. The issue is located in the DelvsList interface of the /goform/aspForm endpoint. Maliciously crafted input can cause the stack to overflow, potentially leading to unintended code execution or denial of service. Exploitation of this vulnerability could result in serious consequences, including unauthorized access, data breaches, or network disruptions. Organizations using the affected H3C Magic R300 routers are strongly advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.