---
id: CVE-2026-112373
title: H3C Magic NX15 usrlist sub_416874 stack-based overflow
summary: >-
  A security vulnerability has been detected in H3C Magic NX15 NX15V100R017.
  This impacts the function sub_416874 of the file /usr/bin/usrlist. Such
  manipulation leads to stack-based buffer overflow. It is possible to launch
  the attack rem…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R'
cvssSource: cna
cwe:
  - CWE-121
  - CWE-119
vendor: H3C
product: Magic NX15
affected:
  - magic_nx15 NX15V100R017
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T23:00:16.156Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112373'
references:
  - url: 'https://vuldb.com/vuln/422421'
    label: VDB-422421 | H3C Magic NX15 usrlist sub_416874 stack-based overflow
  - url: 'https://vuldb.com/vuln/422421/cti'
    label: 'VDB-422421 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-112373'
    label: CVE-2026-112373 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/983540'
    label: 'Submit #983540 | H3C Magic NX15 NX15V100R017 Denial of Service'
  - url: >-
      https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_stack_overflow_dos
tags:
  - cve.org
ingestedAt: '2026-10-19T23:47:31.358Z'
---

## Overview

A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

## Affected

- `magic_nx15 NX15V100R017`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.