CVE-2025-3854

HIGH Year: 2025
CVSS v3 Score
8.0
High
CVSS v2 Score
7.7
High
Weakness Type
CWE-119
View all →

Vulnerability Description

A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/Edit_List_SSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to buffer overflow. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Other functions might be affected as well.

Related Vulnerabilities

CVE-2016-8377

HIGH
CVSS:8.0(High)

An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, ...

CWE-1192016

CVE-2017-2714

HIGH
CVSS:8.0(High)

The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can exploit this vulnerability to execute arbitra...

CWE-1192017

CVE-2017-7050

HIGH
CVSS:8.0(High)

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context...

CWE-1192017

CVE-2017-7051

HIGH
CVSS:8.0(High)

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context...

CWE-1192017

CVE-2017-7054

HIGH
CVSS:8.0(High)

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context...

CWE-1192017

CVE-2017-8335

HIGH
CVSS:8.0(High)

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting name for wireless network. These values ar...

CWE-1192017