CVE-2026-3701 - Vulnerability Analysis

Overview

H3C Magic B1 up to 100R004 contains a buffer overflow caused by manipulation of the argument param in Edit_BasicSSID_5G function in /goform/aspForm, letting remote attackers execute code, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause buffer overflow, potentially leading to remote code execution and full system compromise.

Mitigation

Update to the latest version or patch provided by the vendor.

References

• https://vuldb.com/?submit.765771
• https://github.com/saltedfisholdxu/vul/blob/main/Magic%20B1/6_b1-report.md
• https://vuldb.com/?ctiid.349647
• https://vuldb.com/?id.349647

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 8, 2026

🟠 CVE-2026-3701 - High (8.8) A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack ca... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3701/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner