CVE-2026-112373 Details

A stack-based buffer overflow vulnerability has been identified in the H3C Magic NX15 router, specifically in the NX15V100R017 firmware. The issue arises in the function sub_416874 of the file /usr/bin/usrlist. This vulnerability can be exploited remotely, causing a denial-of-service condition by creating a crash-restart loop. The buffer overflow occurs because the usrlist utility reads lines from /var/run/agentlist' and appends them to a 1024-byte stack buffer using 'strcat', without proper bounds checking. Lines exceeding this limit overwrite saved stack data. The vulnerability is exacerbated by the fact that the binary is compiled without stack protection or fortify source, allowing the overflow to disrupt the stack and cause a segmentation fault, as evidenced by kernel log entries.