CVE-2023-33634

Summary

CVE-2023-33634 is a newly disclosed vulnerability affecting the H3C Magic R300 router running version R300-2100MV100R004. This vulnerability can be exploited through the EdittriggerList interface located at /goform/aspForm, which leads to a stack overflow. By sending maliciously crafted data to this interface, an attacker can potentially gain unauthorized access to the system or cause it to crash, leading to a denial-of-service condition. This issue poses a significant risk to networks using this vulnerable router version and requires an immediate update to a patched version to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.