A vulnerability was found in H3C Magic B0 up to 100R002. It has been classified as critical. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow.

This vulnerability is registered as CVE-2025-14015. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.