A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow.

This vulnerability is handled as CVE-2025-4440. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available.