CVE-2026-6560

HIGH

H3C Magic B0 aspForm Edit_BasicSSID buffer overflow

Title source: cna

Description

A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSS v3 8.8
EPSS 0.0004
EPSS Percentile 12.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
H3C/Magic B0 100R002
Published Apr 19, 2026
Tracked Since Apr 19, 2026