Zheng

**Name of the Vulnerable Software and Affected Versions** H3C Magic B0 versions prior to 100R002 **Description** A remote stack-based buffer overflow occurs due to improper handling of the `param` argument within the `SetMobileAPInfoById()` function located in the `/goform/aspForm` file. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/aspForm` file or avoid using the `SetMobileAPInfoById()` function.

**Name of the Vulnerable Software and Affected Versions** D-Link DI-7001 MINI versions prior to 19.09.19A1 **Description** A stack-based buffer overflow occurs in the API component within the `sprintf()` function of the '/httpd debug.asp' endpoint. This issue is triggered by the manipulation of the `Time` argument and can be exploited remotely. **Recommendations** Update to a version later than 19.09.19A1. As a temporary workaround, restrict access to the '/httpd debug.asp' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** D-Link DI-8400 versions prior to 16.07.26A1 **Description** A stack-based buffer overflow occurs in an unknown function within the '/dbsrv.asp' endpoint. This issue is triggered by manipulating the `str` argument, allowing for remote exploitation. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.