h3c Magic b1st Firmware vulnerabilities

11 CVEs affecting h3c Magic b1st Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-42638, published 2024-08-16.

More from h3c.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-34928, published 2023-06-28. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34937, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34936, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34935, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34934, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34933, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34932, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34931, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34930, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
• CVE-2023-34929, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Latest

• CVE-2024-42638, published 2024-08-16. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.