CVE-2023-2676

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may be used. VDB-228890 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

Vendor	Product	Versions
H3C	R160	V1004004

References

https://github.com/xinzhihen06/dxq-cve/blob/main/h3cr160.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.228890Permissions Required, Third Party Advisory
https://vuldb.com/?id.228890Third Party Advisory
https://github.com/xinzhihen06/dxq-cve/blob/main/h3cr160.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.228890Permissions Required, Third Party Advisory
https://vuldb.com/?id.228890Third Party Advisory

Timeline

Published: May 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-267607.5Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability a CVE-2023-267628.8Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.CVE-2023-267677.5Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function CVE-2023-267687.5Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTab CVE-2023-267697.5Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubt CVE-2023-26778.8A vulnerability, which was classified as critical, was found in SourceCodester Covid-19 Contact Tracing System 1.0. This affects an unknown CVE-2023-267709.8TaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a registered UserID can change the password of t CVE-2023-267716.5Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS). There is a lack of validation in the filetype when uploading a SVG profile pictu CVE-2023-267736.1Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the produc CVE-2023-267747.5An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of CVE-2023-267757.8File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the asse CVE-2023-267766.1Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of t