This vulnerability in H3C Magic B0 (up to version 100R002) involves a buffer overflow in the Edit_BasicSSID_5G function within the /goform/aspForm file. Remote attackers can exploit this by manipulating an argument parameter, leading to a buffer overflow condition. The CVSS 4.0 score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not provided any response or patch, and no official remediation is currently available.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The high CVSS score reflects significant risk to confidentiality, integrity, and availability of the system. No known exploits are reported in the wild yet, but a public exploit exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a patch, users should monitor official H3C channels for updates. Until a fix is available, consider restricting remote access to the affected function or device to trusted networks only to reduce exposure.