Description
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| H3C | Magic NX15 | NX15V100R017 | — |
References
- VDB-422421 | H3C Magic NX15 usrlist sub_416874 stack-based overflow vdb-entry technical-description
- VDB-422421 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-112373 | CVE Analysis and Report third-party-advisory
- Submit #983540 | H3C Magic NX15 NX15V100R017 Denial of Service third-party-advisory
- https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_stack_overflow_dos exploit