CVE-2025-6091 | H3C GR-3000AX V100R007L50 /routing/goform/aspForm UpdateWanParamsMulti/UpdateIpv6Params param buffer overflow

A vulnerability was found in H3C GR-3000AX V100R007L50. It has been classified as critical. Affected is the function UpdateWanParamsMulti/UpdateIpv6Params of the file /routing/goform/aspForm. The manipulation of the argument param leads to buffer overflow.

This vulnerability is traded as CVE-2025-6091. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

The vendor confirms the existence of this issue. Because they assess the risk as low, they do not have immediate plans for remediation.