A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function SetAPWifiorLedInfoById of the file /goform/aspForm. The manip…

A buffer overflow vulnerability has been discovered in H3C Magic B1 routers up to version 100R004. The vulnerability affects the SetAPWifiorLedInfoById function in the /goform/aspForm file, where manipulation of the param argument leads to buffer overflow. The vulnerability can be exploited remotely and a public exploit has been disclosed. The vendor was contacted about the disclosure but did not respond. This represents a critical security risk for affected H3C router models.