CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2023-33629Public Exploit

H3C MagicR300 - RCE (CVE-2023-33629)

PublishedMay 31, 2023
First SeenMay 12, 2025
Last Seen
Reported
CVSS7.2
H3C
H3CMagic R300
iot

Description

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.

psychologyCrowdSec Analysis

CVE-2023-33629 is a vulnerability in the H3C Magic R300 device, involving a stack overflow condition through the DeltriggerList interface.

CrowdSec has been tracking this vulnerability and its exploits since 12th of May 2025.

Insights from the CrowdSec network reveal that the attackers trying to exploit CVE-2023-33629 are composed of a fairly even mix of opportunistic and targeted actors. Some attackers employ preliminary reconnaissance, while others use indiscriminate scanning. CrowdSec data also reveals a clear uptick in attacks involving CVE-2023-33629 over the past week. Activity is above the usual baseline, suggesting growing attention from attackers. This may reflect rising awareness, recent exploit releases, or expanded targeting efforts.

Exploitation attempts focus on requests to URLs containing /goform/aspform.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2023-05-31
Rule Released2025-05-12
CrowdSec First Seen2025-05-12

Related Weaknesses

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References