PT-2025-22868 · H3C · H3C Gr-5400Ax
Daddyshark
·
Published
2025-05-25
·
Updated
2025-06-03
·
CVE-2025-5156
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
H3C GR-5400AX versions up to 100R008
Description
A critical issue was found in the EditWlanMacList function of the file /routing/goform/aspForm, which can be exploited remotely. The manipulation of the
param argument leads to a buffer overflow. The exploit has been disclosed to the public. The vendor was contacted about this issue but did not respond.Recommendations
For H3C GR-5400AX versions up to 100R008, as a temporary workaround, consider disabling the EditWlanMacList function until a patch is available. Restrict access to the /routing/goform/aspForm file to minimize the risk of exploitation. Avoid using the
param argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
H3C Gr-5400Ax