What’s Vulnerable › Vulnerabilities

CVE-2025-4446: H3C GR-5400AX aspForm Edit_List_SSID buffer overflow

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-09 · updated 2026-06-17
• Weakness: CWE-119

Description

A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function Edit_List_SSID of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack needs to be approached within the local network.

Affected products

• H3C GR-5400AX: 100R008

References

• https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20GB5400AX/5.md
• https://vuldb.com/?ctiid.308056
• https://vuldb.com/?id.308056
• https://vuldb.com/?submit.561866

Get alerted when CVE-2025-4446 or the next vulnerability affects your stack