This vulnerability in H3C Magic B0 up to version 100R002 involves a buffer overflow in the Edit_BasicSSID_5G function of the /goform/aspForm component. The flaw arises from improper handling of an argument parameter, allowing remote attackers to cause a buffer overflow. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has not provided a fix or advisory, and no patch links are available. Exploit code has been made public but no confirmed exploitation in the wild is reported.

Successful exploitation of this vulnerability could allow remote attackers to cause a buffer overflow, which may lead to denial of service or potentially arbitrary code execution on the affected device. Given the high CVSS score and the remote attack vector with no user interaction required, the impact is significant for affected systems. However, there is no confirmed evidence of active exploitation in operational environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should monitor for updates from H3C. Until a patch is released, consider limiting network exposure of the affected device and applying network-level protections to restrict access to the vulnerable function if possible.