Critical severity · published May 25, 2025
CVE-2025-5156
H3C GR-5400AX aspForm EditWlanMacList buffer overflow
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical. Affected by this issue is the function EditWlanMacList of the file /routing/goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
GR-5400AX · H3C
100R008 · source: vendor
GF
Gr-5400ax Firmware · H3c
through 100R008 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5156
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5156
Broken Link
https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20GB5400AX/6.md
Permissions Required
https://vuldb.com/?ctiid.310244
Third Party Advisory
https://vuldb.com/?id.310244
Third Party Advisory
https://vuldb.com/?submit.574080
More from GR-5400AX
8.8
CVE-2025-6090
H3C GR-5400AX aspForm UpdateIpv6params buffer overflow
8.0
CVE-2025-4446
H3C GR-5400AX aspForm Edit_List_SSID buffer overflow