CVE-2026-3701 - Vulnerability Analysis

Overview

H3C Magic B1 up to 100R004 contains a buffer overflow caused by manipulation of the argument param in Edit_BasicSSID_5G function in /goform/aspForm, letting remote attackers execute code, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause buffer overflow, potentially leading to remote code execution and full system compromise.

Mitigation

Update to the latest version or patch provided by the vendor.

References

• https://github.com/saltedfisholdxu/vul/blob/main/Magic%20B1/6_b1-report.md
• https://vuldb.com/?ctiid.349647
• https://vuldb.com/?id.349647
• https://vuldb.com/?submit.765771

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner