H3C Magic B1 Buffer Overflow Vulnerability in 5G SSID Edit Function

A buffer overflow vulnerability has been identified in the H3C Magic B1 router, affecting firmware versions up to 100R004. The issue arises in the function 'Edit_BasicSSID_5G' within the file '/goform/aspForm'. The vulnerability can be exploited remotely by manipulating the 'param' argument, leading to potential denial-of-service conditions or even remote code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can disrupt normal device operation or be leveraged for remote code execution.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/aspForm' with the 'CMD' parameter set to 'Edit_BasicSSID_5G'. The 'param' parameter must be filled with a payload that exceeds the buffer length, effectively causing the overflow.