| タイトル | Contemporary Control Systems, Inc BASRT-B Firmware Revision: 2.7.2 Denial of Service |
|---|
| 説明 | This report uncovers a critical Denial of Service (DoS) vulnerability present in the BASRT-B BACnet router, manufactured by Contemporary Control Systems, Inc. Despite official documentation stating that the "Device-Communication-Control" service is unsupported, our investigation revealed that the device responds to commands for this service without password protection. Exploiting this vulnerability permits any user to suspend all communications on the device, potentially causing disruption across the entire BACnet network, thereby affecting crucial infrastructure operations. |
|---|
| ソース | ⚠️ https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT_CVE_apply.pdf |
|---|
| ユーザー | isZzzzz (UID 64489) |
|---|
| 送信 | 2024年04月21日 15:00 (2 年 ago) |
|---|
| モデレーション | 2024年04月27日 08:02 (6 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 262224 [Contemporary Controls BASrouter BACnet BASRT-B 2.7.2 Device-Communication-Control Service サービス拒否] |
|---|
| ポイント | 20 |
|---|