CVE-2026-112373: Stack-based Buffer Overflow in H3C Magic NX15
Description
CVE-2026-112373 is a stack-based buffer overflow vulnerability in the H3C Magic NX15 NX15V100R017 device. The flaw exists in the sub_416874 function of the /usr/bin/usrlist file and can be exploited remotely without user interaction. The vulnerability has a high severity with a CVSS 4.0 score of 7.1. Public exploit details have been disclosed, but no official patch or remediation information is provided.
CVSS v4.0
Score 7.1high
Affected software
H3C
Magic NX15
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a stack-based buffer overflow in the sub_416874 function within the /usr/bin/usrlist executable of H3C Magic NX15 NX15V100R017. An attacker can remotely trigger this overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability is publicly disclosed with known exploit code available, increasing the risk of exploitation. The vendor was notified early, but no patch or fix details are currently available.
Potential Impact
Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the remote attack vector and lack of required user interaction, the vulnerability poses a significant risk to affected systems.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting network exposure of the affected device and monitoring for suspicious activity related to the /usr/bin/usrlist process.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-19T15:59:01.321Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad6a8eb2cdf04f656a61805
Added to database: 10/19/2026, 23:34:03 UTC
Last enriched: 10/19/2026, 23:48:15 UTC
Last updated: 10/19/2026, 23:48:15 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.