{"id":"CVE-2026-112373","title":"H3C Magic NX15 usrlist sub_416874 stack-based overflow","summary":"A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack rem…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R","cvssSource":"cna","cwe":["CWE-121","CWE-119"],"vendor":"H3C","product":"Magic NX15","affected":["magic_nx15 NX15V100R017"],"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T23:00:16.156Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-112373","references":[{"url":"https://vuldb.com/vuln/422421","label":"VDB-422421 | H3C Magic NX15 usrlist sub_416874 stack-based overflow"},{"url":"https://vuldb.com/vuln/422421/cti","label":"VDB-422421 | CTI Indicators (IOB, IOC, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-112373","label":"CVE-2026-112373 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/983540","label":"Submit #983540 | H3C Magic NX15 NX15V100R017 Denial of Service"},{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_stack_overflow_dos"}],"tags":["cve.org"],"ingestedAt":"2026-10-19T23:47:31.358Z","slug":"CVE-2026-112373","body":"## Overview\n\nA security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.\n\n## Affected\n\n- `magic_nx15 NX15V100R017`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}