H3C Magic B0 Stack-Based Buffer Overflow Vulnerability in SetMobileAPInfoById Function

A stack-based buffer overflow vulnerability has been identified in the H3C Magic B0 router, affecting firmware versions through 100R002. The vulnerability arises in the SetMobileAPInfoById function within the /goform/aspForm file. This issue can be exploited remotely by manipulating the 'param' argument, leading to potential denial-of-service conditions or arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/aspForm endpoint. The request must include a 'CMD' parameter set to 'SetMobileAPInfoById' and a 'param' field containing a long string of data. This excessive data will overflow the buffer, creating the vulnerability.