CVE-2023-34924

HIGH

H3C Magic B1STW B1STV100R012 - Stack Overflow via SetAPInfoById Function

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-34924. PoCs published by ChrisL0tus.

AI-analyzed exploit summary This repository contains a writeup describing a buffer overflow vulnerability (CVE-2023-34924) in the H3C Magic B1STW B1STV100R012 router. The vulnerability exists in the SetAPInfoById function, which fails to validate input size, leading to a stack overflow and potential DoS or RCE.

Description

H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the function SetAPInfoById. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Exploits (1)

nomisec WRITEUP
by ChrisL0tus · poc
https://github.com/ChrisL0tus/CVE-2023-34924

This repository contains a writeup describing a buffer overflow vulnerability (CVE-2023-34924) in the H3C Magic B1STW B1STV100R012 router. The vulnerability exists in the SetAPInfoById function, which fails to validate input size, leading to a stack overflow and potential DoS or RCE.

Classification
Writeup 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Theoretical
Target: H3C Magic B1STW B1STV100R012 router
No auth needed
Prerequisites: Network access to the vulnerable router · Ability to send crafted requests to the web service
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0091
EPSS Percentile 55.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-787
Status published
Products (1)
h3c/magic_b1stw_firmware b1stv100r012
Published Jun 26, 2023
Tracked Since Feb 18, 2026