CVE-2024-57482

critical · 9.8

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

9.8

CVSS

0.8%

EPSS (exploit prob.)

54th

EPSS percentile

2025-01-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Affected products

Vendor	Product	Affected versions
h3c	n12_firmware	100r005
h3c	n12	all versions

Check a specific version with /api/v1/cve/match.

References

https://gist.github.com/XiaoCurry/d39f76a025df8b78a5f9e1aa48c16d18

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-57482