CVE-2024-57471

9.8 criticalEPSS 0.8%

Critical (9.8) in h3c n12 firmware. EPSS 0.8% chance of exploitation in the next 30 days.

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2025-01-14
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

h3c:n12_firmware

References

https://gist.github.com/XiaoCurry/88a43c9a68694941221eb7592da39d4c

Check your stack JSON