CVE-2024-21875

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-21875
Allocation of Resources Without Limits or Throttling vulnerability in Badge leading to a denial of service attack.Team Hacker Hotel Badge 2024 on risc-v (billboard modules) allows Flooding.This issue affects Hacker Hotel Badge 2024: from 0.1.0 through 0.1.3.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://csirt.divd.nl/CVE-2024-21875 Third Party Advisory
https://github.com/badgeteam/hackerhotel-2024-firmware-esp32c6/pull/64 Exploit Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:badge.team:hacker_hotel_badge_2024:*:*:*:*:*:*:*:*
History

05 Sep 2024, 13:50

Type Values Removed Values Added
References () https://csirt.divd.nl/CVE-2024-21875 - () https://csirt.divd.nl/CVE-2024-21875 - Third Party Advisory
References () https://github.com/badgeteam/hackerhotel-2024-firmware-esp32c6/pull/64 - () https://github.com/badgeteam/hackerhotel-2024-firmware-esp32c6/pull/64 - Exploit, Issue Tracking
First Time Badge.team hacker Hotel Badge 2024
Badge.team
CVSS v2 : unknown
v3 : 5.7 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:badge.team:hacker_hotel_badge_2024:*:*:*:*:*:*:*:*

12 Apr 2024, 07:15

Type Values Removed Values Added
Summary
  • (es) Asignación de recursos sin límites o vulnerabilidad de limitación en Badge que conduce a un ataque de denegación de servicio. Team Hacker Hotel Badge 2024 en risc-v (módulos de vallas publicitarias) permite inundaciones. Este problema afecta a Hacker Hotel Badge 2024: desde 0.1.0 hasta 0.1.3 .
Summary (en) Allocation of Resources Without Limits or Throttling vulnerability in Badge leading to a denial of service attack.Team Hacker Hotel Badge 2024 on risc-v (billboard modules) allows Flooding.This issue affects Hacker Hotel Badge 2024: from 0.1.0 through 0.1.3. (en) Allocation of Resources Without Limits or Throttling vulnerability in Badge leading to a denial of service attack.Team Hacker Hotel Badge 2024 on risc-v (billboard modules) allows Flooding.This issue affects Hacker Hotel Badge 2024: from 0.1.0 through 0.1.3.

11 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-11 09:15

Updated : 2024-10-16 12:15

NVD link : CVE-2024-21875

Mitre link : CVE-2024-21875

CVE.ORG link : CVE-2024-21875

JSON object : View

Products Affected

badge.team

  • hacker_hotel_badge_2024
CWE
CWE-770

Allocation of Resources Without Limits or Throttling