This vulnerability in H3C N12 V100R005 arises from a lack of length verification in the MAC address update function, leading to a buffer overflow. An attacker can exploit this remotely by sending a specially crafted POST request to the /bin/webs endpoint, resulting in either a denial of service (device crash) or arbitrary command execution. The CVSS 3.1 base score of 9.8 reflects the critical impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no exploits are currently known in the wild.

Successful exploitation can lead to remote code execution or denial of service on affected H3C N12 devices, compromising device availability and potentially allowing full system compromise. The vulnerability affects confidentiality, integrity, and availability with a critical severity rating.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected device's management interfaces and monitor for suspicious POST requests to /bin/webs. Avoid exposing the device to untrusted networks.