H3C GR-5400AX Buffer Overflow Vulnerability in EditWlanMacList Function

A critical buffer overflow vulnerability has been identified in the H3C GR-5400AX router, specifically in versions up to 100R008. The issue arises in the EditWlanMacList function within the /routing/goform/aspForm file. The vulnerability can be exploited remotely by manipulating the 'param' argument, leading to potential denial-of-service conditions or even remote code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can disrupt normal device operation and potentially allow for arbitrary code execution.

Reproduction

To reproduce this vulnerability, send a request to the /routing/goform/aspForm endpoint with a crafted 'param' argument that exceeds the buffer size. This can be done using a variety of tools that allow for HTTP request manipulation.