CVE-2024-4292

EUVD-2024-32842 · Published Apr 27, 2024

A vulnerability classified as critical has been found in Contemporary Controls BASrouter BACnet BASRT-B 2.7.2. Affected is an unknown function of the component Device-Communication-Control Service. The manipulation with the input 55ff0500370015f30104025506110afb7519035d0841e4bece257b6acfc71f leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262224. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Weaknesses

CWE-404

CVSS scores

v3.16.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
v2.06.1AV:A/AC:L/Au:N/C:N/I:N/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Impact

T1498.001Direct Network Flood T1499Endpoint Denial of Service T1499.001OS Exhaustion Flood T1499.003Application Exhaustion Flood

References

Potentially impacted assets

See if this affects your attack surface