Today > | 9 High | 21 Medium | 6 Low vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-33623

Nov. 1, 2024, 12:57 p.m.

CVSS Score

3.7 / 10

Product(s) Impacted

LevelOne WBR-6012

  • R0.40e6

Description

A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.

Weaknesses

CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

CWE ID: 835

Date

Published: Oct. 30, 2024, 2:15 p.m.

Last Modified: Nov. 1, 2024, 12:57 p.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

talos-cna@cisco.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

Base Score
3.7
Exploitability Score
2.2
Impact Score
1.4
Base Severity
LOW
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References