Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of multipart boundaries. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-23171.
References
Link | Resource |
---|---|
https://www.zerodayinitiative.com/advisories/ZDI-24-673/ | Third Party Advisory VDB Entry |
https://www.zerodayinitiative.com/advisories/ZDI-24-673/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 09:48
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.zerodayinitiative.com/advisories/ZDI-24-673/ - Third Party Advisory, VDB Entry |
07 Aug 2024, 18:13
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:deepseaelectronics:dse855:-:*:*:*:*:*:*:* |
07 Aug 2024, 17:58
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:deepseaelectronics:dse855:*:*:*:*:*:*:*:* cpe:2.3:o:deepseaelectronics:dse855_firmware:1.1.0:*:*:*:*:*:*:* |
|
References | () https://www.zerodayinitiative.com/advisories/ZDI-24-673/ - Third Party Advisory, VDB Entry | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
First Time |
Deepseaelectronics dse855 Firmware
Deepseaelectronics dse855 Deepseaelectronics |
17 Jun 2024, 12:43
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
13 Jun 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-13 20:15
Updated : 2024-11-21 09:48
NVD link : CVE-2024-5949
Mitre link : CVE-2024-5949
CVE.ORG link : CVE-2024-5949
JSON object : View
Products Affected
deepseaelectronics
- dse855
- dse855_firmware
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')