This vulnerability in H3C Magic B0 up to version 100R002 involves a buffer overflow triggered by improper handling of an argument parameter in the Edit_BasicSSID function within the /goform/aspForm file. The flaw allows remote attackers to cause a buffer overflow, which could lead to potential compromise of the device. The CVSS 4.0 score of 8.7 indicates a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not provided a patch or remediation, and no cloud service is involved.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow on the affected device, potentially leading to arbitrary code execution or denial of service. The high CVSS score reflects significant impact on confidentiality, integrity, and availability. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official patch is available, users should monitor for updates from H3C. In the meantime, restricting network access to the affected device and limiting exposure of the vulnerable interface may reduce risk.