CVE-2023-33629 is a high-severity stack overflow vulnerability affecting H3C Magic R300 routers, specifically version R300-2100MV100R004. The vulnerability, found in the DeltriggerList interface at /goform/aspForm, allows for unauthenticated remote code execution. With a CVSS score of 7.2 (HIGH) and an EPSS score indicating high exploitability, this flaw presents a significant risk due to its potential for complete compromise of confidentiality, integrity, and availability. While not yet listed in CISA's KEV catalog, exploit templates for remote code execution exist, suggesting a high likelihood of future exploitation, though there is currently no evidence of active exploitation or widespread community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
r300-2100mv100r004CPE matchmatch criteria | cpe:2.3:o:h3c:magic_r300-2100m_firmware:r300-2100mv100r004:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.